NVD

Id
10063  
Name
CVE-2011-3417  
Description
The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, when sliding expiry is enabled, does not properly handle cached content, which allows remote attackers to obtain access to arbitrary user accounts via a crafted URL, aka "ASP.NET Forms Authentication Ticket Caching Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-12-29  
Modified Date
2013-01-29  
Seq
2011-3417  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57734 10063 CVE-2011-3417 oval:org.mitre.oval:def:14625  View
57735 10063 CVE-2011-3417 MS11-100  View
57736 10063 CVE-2011-3417 51203  View
57737 10063 CVE-2011-3417 TA11-347A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33319 JVNDB-2011-003559 Microsoft .NET Framework における任意のユーザアカウントへアクセスされる脆弱性 Microsoft .NET Framework の ASP.NET のサブシステムにおけるフォーム認証機能は、sliding expiry が有効な時に、キャッシュされたコンテンツを適切に処理しないため、任意のユーザアカウントへのアクセス権を取得される脆弱性が存在します。 CVE-2011-3417 51324 CVE-2011-3417 10063 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003559.html 2011-12-29 2012-01-04 View