PT-2002-1463 · Microsoft · Asp.Net

Publicado 2002-06-11 · Atualizado 2016-10-18 · CVE-2002-0409

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ASP.NET example code (affected versions not specified)

Description The issue allows remote attackers to view the orders of other users by modifying the OrderID parameter in the "orderdetails.aspx" page. This page was made available to Microsoft .NET developers as example code and is demonstrated on www.ibuyspystore.com.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-0409

Produtos afetados

Asp.Net

Referências · 3

• http://marc.info/?l=bugtraq&m=101518860823788&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0409 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0409 · Nota