All CWEs
CWE-556
ASP.NET Misconfiguration: Use of Identity Impersonation
VariantIncompleteSimple1 CVE
Configuring an ASP.NET application to run with impersonated credentials may give the application unnecessary privileges.
Common consequences1
- Access ControlGain Privileges or Assume Identity
Potential mitigations1
- Architecture and Design
Use the least privilege principle.
Relationships1
- ChildOfCWE-266
CVEs referencing this CWE1
| CVE | Description | Severity | EPSS | Flags | Modified |
|---|---|---|---|---|---|
| CVE-2024-37081 | The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance. | HIGH7.8 | 4.99%p92 | Weaponized | 2026-11-04 |