| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.AspNetCore.Identity | ≥ 1.0.0, < 1.0.6≥ 1.1.0, < 1.1.6≥ 2.0.0, < 2.0.4≥ 2.1.0, < 2.1.2 | 1.0.61.1.62.0.42.1.2 |
| asp.net core | = 1.0= 1.1= 2.0 | |
| asp.net model view controller | = 5.2 | |
| asp.net webpages | = 3.2.3 |
A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free