ID:9689 - Exploit for Permissions, Privileges, and Access Controls in Microsoft .NET Framework - CVE-2023-36899

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Exploits ID:9689 - Exploit for Permissions, Privileges, and Access Controls in Microsoft .NET Framework - CVE-2023-36899

ID:9689 - Exploit for Permissions, Privileges, and Access Controls in Microsoft .NET Framework - CVE-2023-36899

Published: April 9, 2024


Vulnerability identifier: #VU79243
Vulnerability risk: Medium
CVE-ID: CVE-2023-36899
CWE-ID: CWE-264
Exploitation vector: Remote access
Vulnerable software:
Microsoft .NET Framework

Link to public exploit:


Vulnerability description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions in ASP.NET, which leads to security restrictions bypass and privilege escalation.


Remediation

Install updates from vendor's website.