cve.bz

CWE-520: .NET Misconfiguration: Use of Impersonation

Filter

Allowing a .NET application to run at potentially escalated levels of access to the underlying operating and file systems can be dangerous and result in various forms of attacks.

What the weakness is: CWE-520 at MITRE. All weaknesses

Ask an AI about CWE-520

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-520: .NET Misconfiguration: Use of Impersonation and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/520.html and https://cve.bz/cve/cwe/520?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.1CVE-2026-13444EPSS 0.4%

    IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by creating their own flow with matching Chroma persist_directory and collection_name values. The attacker receives exact victim …

  2. 7.1CVE-2026-13442EPSS 0.3%

    IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity …

  3. 7.4CVE-2026-2450EPSS 0.3%

    .NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affects upKeeper Instant Privilege Access: through 1.5.0.

  4. 8.6CVE-2019-25608EPSS 0.1%

    Iperius Backup 6.1.0 contains a privilege escalation vulnerability that allows low-privilege users to execute arbitrary programs with elevated privileges by creating backup jobs. Attackers can configure backup jobs to execute malicious bat…

  5. 7.5CVE-2024-46943EPSS 0.6%

    An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue controller does not possess the complete cl…