10032-5—Viewstate without MAC Signature (Sure)

PUBLISHEDsecurity alertHigh

Passive

Metadata

Alert ID:: 10032-5
Risk:: High
Type:: Passive
CWE:: CWE-642External Control of Critical State Data

摘要

This website uses ASP.NET’s Viewstate but without any MAC.

解决方案

Ensure the MAC is set for all pages on this website.

参考

browse all alerts