CWE-556 ASP.NET Misconfiguration: Use of Identity Impersonation
variantConfiguring an ASP.NET application to run with impersonated credentials may give the application unnecessary privileges.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-37081US | — | Exploit | ||
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan