CVE-2013-1337 — Improper Authentication in Microsoft NET Framework

CWE-287 — Improper Authentication4 documents4 sources
Severity
7.5HIGHNVD
EPSS
22.8%
top 4.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft NET Framework
Timeline
PublishedMay 15
Latest updateMay 14

Description

Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (WCF) endpoint authentication in certain situations involving passwords over HTTPS, which allows remote attackers to bypass authentication by sending queries to an endpoint, aka "Authentication Bypass Vulnerability."

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-73vm-jqp4-fcg6: Microsoft↗2022-05-14
▶
CVEList
CVE-2013-1337: Microsoft↗2013-05-15
▶

💥Exploits & PoCs

1
Exploit-DB
D-Link DIR-865L - Cross-Site Request Forgery↗2013-04-19
▶
CVE-2013-1337 — Improper Authentication in Microsoft | cvebase