10094-1—ASP.NET ViewState Disclosure

PUBLISHEDsecurity alertInformational

Passive

Metadata

Alert ID:: 10094-1
Risk:: Informational
Type:: Passive
CWE:: CWE-200Exposure of Sensitive Information to an Unauthorized Actor

Summary

An ASP.NET ViewState was disclosed by the application/web server

Solution

Manually confirm that the ASP.NET ViewState does not leak sensitive information, and that the data cannot be aggregated/used to exploit other vulnerabilities.

References

browse all alerts