Skip to content
OpenAdvisories

Weakness (CWE)

CWE-520: .NET Misconfiguration: Use of Impersonation

Variant Incomplete

Allowing a .NET application to run at potentially escalated levels of access to the underlying operating and file systems can be dangerous and result in various forms of attacks.

How to prevent it (1 mitigation)

  1. Operation

    Run the application with limited privilege to the underlying operating and file system.

Source: MITRE CWE-520

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2024-46943

    OpenDaylight Authentication, Authorization and Accounting (AAA) peer impersonation vulnerability

    An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue controller does not possess the complete cluster configuration …

    org.opendaylight.aaa:aaa-artifacts Maven