10094-1—ASP.NET ViewState Disclosure

PUBLISHEDsecurity alertInformational

Passive

Metadata

Alert ID:: 10094-1
Risk:: Informational
Type:: Passive
CWE:: CWE-200Exposure of Sensitive Information to an Unauthorized Actor

摘要

An ASP.NET ViewState was disclosed by the application/web server

解决方案

Manually confirm that the ASP.NET ViewState does not leak sensitive information, and that the data cannot be aggregated/used to exploit other vulnerabilities.

参考

browse all alerts