CVE-2018-8171: Improper Authentication

July 11, 2018 (updated June 30, 2021)

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka “ASP.NET Security Feature Bypass Vulnerability.” This affects ASP.NET, ASP.NET Core, ASP.NET Core, ASP.NET Core, ASP.NET MVC

References

www.securityfocus.com/bid/104659
www.securitytracker.com/id/1041267
nvd.nist.gov/vuln/detail/CVE-2018-8171
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8171

Detect and mitigate CVE-2018-8171 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →