Skip to content
Threat Feed
Subscribe

Product

Microsoft.AspNetCore.Authentication.Negotiate (>= 9.0.0, <= 9.0.20)

1 brief RSS
high advisory

Microsoft.AspNetCore.Authentication.Negotiate Elevation of Privilege Vulnerability

An elevation of privilege vulnerability in the Microsoft.AspNetCore.Authentication.Negotiate package allows an attacker to misassociate an authenticated identity with an unintended LDAP principal due to improper validation of Kerberos principal SIDs.

Microsoft.AspNetCore.Authentication.Negotiate +2 vulnerability elevation-of-privilege dotnet
1t 1c