CVE-2023-36560: ASP.NET Security Feature Bypass Vulnerability
Published Nov 14, 2023
·Updated
ASP.NET Security Feature Bypass Vulnerability
Affected Software
62 affected componentsFixes available
Microsoft .NET Framework=3.0
Microsoft .NET Framework=4.6.2
Microsoft .NET Framework=2.0
Microsoft .NET Framework=4.6.2, =4.7, =4.7.1, =4.7.2
Microsoft .NET Framework=4.8
Microsoft .NET Framework=3.5.1
Microsoft .NET Framework=4.6.2, =4.7, =4.7.1, =4.7.2
Microsoft .NET Framework=4.8
Microsoft .NET Framework=3.5
Microsoft .NET Framework=3.5
Microsoft .NET Framework=3.5, =4.6, =4.6.2
Microsoft .NET Framework=3.5, =4.6.2, =4.7, =4.7.1, =4.7.2
Microsoft .NET Framework=4.8
Microsoft .NET Framework=4.8
Microsoft .NET Framework=3.5, =4.8
Microsoft .NET Framework=3.5, =4.7.2
Microsoft .NET Framework=3.5, =4.8.1
Microsoft .NET Framework=3.5, =4.8
Microsoft .NET Framework=3.5, =4.8.1
Microsoft .NET Framework=3.5, =4.8
Microsoft .NET Framework=3.5, =4.8.1
Microsoft .NET Framework=3.5, =4.8.1
Microsoft .NET Framework=3.5, =4.8
Microsoft .NET Framework=3.5, =4.8.1
Microsoft .NET Framework=3.5, =4.8
Microsoft .NET Framework=3.5, =4.8.1
Microsoft .NET Framework=2.0-sp2
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=sp2
Microsoft .NET Framework=3.0-sp2
Microsoft .NET Framework=3.5
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft .NET Framework=4.6.2
Microsoft .NET Framework=4.7
Microsoft .NET Framework=4.7.1
Microsoft .NET Framework=4.7.2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows 10 1507
Microsoft Windows 10 1507
Microsoft Windows 10 1809
Microsoft Windows 10 1809
Microsoft Windows 10 1809
Microsoft .NET Framework=4.8
Microsoft Windows 10 21h2
Microsoft Windows 10 21h2
Microsoft Windows 10 22h2
Microsoft Windows 10 22h2
Microsoft Windows 10 22h2
Microsoft Windows 11 21h2
Microsoft Windows 11 21h2
Microsoft Windows Server 2022
Microsoft .NET Framework=4.8.1
Microsoft Windows 11 22h2
Microsoft Windows 11 22h2
Microsoft Windows 11 23h2
Microsoft Windows 11 23h2
Microsoft .NET Framework=3.5.1
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows 10 1607
Remediation
Event History
Nov 14, 2023
CVE Published
08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:57 PM
Data Sourced
via MITRE·05:57 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-36560?
CVE-2023-36560 is an ASP.NET Security Feature Bypass Vulnerability.
2
Which software is affected by CVE-2023-36560?
The .NET Framework versions 3.5, 4.8, 4.6.2, 4.7, 4.7.1, 4.7.2, and 2.0 are affected by CVE-2023-36560.
3
What is the severity level of CVE-2023-36560?
CVE-2023-36560 has a severity level of 8.8, which is considered high.
4
How can I fix CVE-2023-36560?
To fix CVE-2023-36560, you should apply the patches provided by Microsoft for the affected versions of the .NET Framework.
5
Where can I find more information about CVE-2023-36560?
You can find more information about CVE-2023-36560 on the Microsoft Security Response Center website.