VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 14, 2015· Updated Jun 17, 2026

CVE-2015-1648

CVE-2015-1648

Description

ASP.NET in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, when the customErrors configuration is disabled, allows remote attackers to obtain sensitive configuration-file information via a crafted request, aka "ASP.NET Information Disclosure Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Microsoft/.net Framework9 versions
    cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*
    • (no CPE)range: 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.