DerScanner
Home / Vulnerability Database / Config files : ASP.NET misconfiguration
Config files

Config files : ASP.NET misconfiguration

Classification

OWASP Top 10 2013
A5-Security Misconfiguration
OWASP Top 10 2017
A6-Security Misconfiguration
OWASP Top 10 2021
A5-Security Misconfiguration
HIPAA
§164.312 (a)(1)
CWE
CWE-1031

Overview

Incorrect or dangerous configuration of ASP.NET can allow intruders to access the system, plan an attack, or slow down or interrupt the system.

References

  1. How to: Create Web.config Files
  2. CWE CATEGORY: OWASP Top Ten 2017 Category A5 - Broken Access Control
MEDIUM

DerScanner Severity Score

Do you want to fix Config files : ASP.NET misconfiguration in your application?

See also

Config files

Config files : Text4Shell Vulnerability

Config files

Config files : Incorrect directory deletion

Config files

Config files : Code injection