ASP.NET Misconfiguration: Use of Identity Impersonation
CWE-556
Configuring an ASP.NET application to run with impersonated credentials may give the application unnecessary privileges.
We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 7.8.
Latest ASP.NET Misconfiguration: Use of Identity Impersonation vulnerabilities
- 7.8 High severity
VMware vCenter Server: ASP.NET Misconfiguration: Use of Identity Impersonation
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.