ASP.NET 表单验证漏洞

最新推荐文章于 2023-02-22 15:36:45 发布

tangle

最新推荐文章于 2023-02-22 15:36:45 发布

阅读量1k

点赞数

分类专栏： Web开发文章标签： asp.net microsoft security module authorization application

本文链接：https://blog.csdn.net/tangle/article/details/136419

版权

微软正在调查一个报告中的ASP.NET安全漏洞，攻击者可能通过构造特殊请求绕过基于表单的身份验证或Windows授权，无须正确凭证查看受保护内容。建议所有ASP.NET用户立即采取预防措施，如安装HTTP模块或编程检查规范化问题。

摘要由CSDN通过智能技术生成

What You Should Know About a Reported Vulnerability in Microsoft ASP.NET

Published: October 5, 2004 | Updated: October 7, 2004

Microsoft is continuing to investigate a reported vulnerability in Microsoft ASP.NET. Reports have indicated that an attacker could send specially crafted requests to a Web server running ASP.NET applications and bypass forms based authentication or Windows authorization configurations, and potentially view secured content without providing the proper credentials. Our initial investigation has revealed that all versions of ASP.NET could be affected, independent of the installed IIS version or IIS components.

Microsoft strongly advises, as a preventativ