10032-5—Viewstate without MAC Signature (Sure)

PUBLISHEDsecurity alertHigh

Passive

Metadata

Alert ID:: 10032-5
Risk:: High
Type:: Passive
CWE:: CWE-642External Control of Critical State Data

Summary

This website uses ASP.NET’s Viewstate but without any MAC.

Solution

Ensure the MAC is set for all pages on this website.

References

browse all alerts