Weakness (CWE)
CWE-556: ASP.NET Misconfiguration: Use of Identity Impersonation
Variant Incomplete
Configuring an ASP.NET application to run with impersonated credentials may give the application unnecessary privileges.
How to prevent it (1 mitigation)
-
Architecture and Design
Use the least privilege principle.
Source: MITRE CWE-556
1 result · Clear filters · Feed
-
High 7.8CVE-2024-37081 Public exploit
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An aut…