CWE-520: .NET Misconfiguration: Use of Impersonation
Allowing a .NET application to run at potentially escalated levels of access to the underlying operating and file systems can be dangerous and result in various forms of attacks.
A kind of CWE-266 Incorrect Privilege Assignment.
From the CWE List. © The MITRE Corporation.
Newest
- ibm langflow oss, langflow +1 more Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints 8.1 High
- ibm langflow oss, langflow +1 more Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints 7.1 High
- upkeeper solutions instant privilege access .NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant... 7.4 High
- iperius backup, iperiusbackup iperius backup +1 more Iperius Backup 6.1.0 Privilege Escalation via Backup Job 8.6 High
- opendaylight aaa, authentication\, authorization and accounting +1 more OpenDaylight Authentication, Authorization and Accounting (AAA) peer impersonation vulnerability 7.5 High