CVE-2013-1337
high · 7.5Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (WCF) endpoint authentication in certain situations involving passwords over HTTPS, which allows remote attackers to bypass authentication by sending queries to an endpoint, aka "Authentication Bypass Vulnerability."
7.5
CVSS
20.6%
EPSS (exploit prob.)
97th
EPSS percentile
2013-05-15
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | .net_framework | 4.5 |
Check a specific version with /api/v1/cve/match.
References
- http://www.us-cert.gov/ncas/alerts/TA13-134A
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-040
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16741
- http://www.us-cert.gov/ncas/alerts/TA13-134A
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-040
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16741
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2013-1337