Microsoft ASP.NET Core Authentication Bypass Vulnerability Allowing Privilege Escalation

A vulnerability in ASP.NET Core allows an authorized attacker to bypass authentication and elevate privileges over a network. This issue arises from an authentication bypass by assumed-immutable data, which could be exploited to gain SYSTEM privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability through the Microsoft Visual Studio Update system or via the Microsoft Update Catalog. For .NET users, the security update is available on the .NET download page.