CWE-556: ASP.NET Misconfiguration: Use of Identity Impersonation
Filter
Configuring an ASP.NET application to run with impersonated credentials may give the application unnecessary privileges.
What the weakness is: CWE-556 at MITRE. All weaknesses
Ask an AI about CWE-556
Show the prompt
Explain CWE-556: ASP.NET Misconfiguration: Use of Identity Impersonation and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/556.html and https://cve.bz/cve/cwe/556?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.8CVE-2024-37081ExploitEPSS 5.0%
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCent…