CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 9.3. It affects Microsoft. Its EPSS score suggests a 35.7% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2011-3417
Severity
HIGH
CVSS
9.3
EPSS
35.73%
Microsoft
Original NVD Description
The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, when sliding expiry is enabled, does not properly handle cached content, which allows remote attackers to obtain access to arbitrary user accounts via a crafted URL, aka "ASP.NET Forms Authentication Ticket Caching Vulnerability."