CVE-2005-1664

3 documents3 sources
Severity
6.4MEDIUM
EPSS
22.0%
top 4.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Asp.net
Timeline
PublishedMay 18
Latest updateMay 1

Description

The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a different view, (2) reuse ViewState information after the application's state has changed, or (3) use the ViewState to conduct attacks or expose content to third parties.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9

Affected Packages1 packages

▶NVDmicrosoft/asp.net1.0, 1.1+1

🔴Vulnerability Details

2
GHSA
GHSA-jw4m-hjv5-r4mr: The __VIEWSTATE functionality in Microsoft ASP↗2022-05-01
▶
CVEList
CVE-2005-1664: The __VIEWSTATE functionality in Microsoft ASP↗2005-05-18
▶
CVE-2005-1664 (MEDIUM CVSS 6.4) | The __VIEWSTATE functionality in Mi | cvebase.io