CVE-2004-0847: The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentica...

Security readout for executives and security teams

This flaw could let an unauthenticated remote user reach restricted ASP.NET .aspx pages protected by Forms Authentication by abusing path validation handling. The supplied data does not enumerate affected versions or CVSS severity, but an authentication bypass on web applications can create serious business risk where legacy ASP.NET systems remain exposed. Most likely exposure is legacy ASP.NET applications using Forms Authentication to protect .aspx files in restricted directories. The bundle lists affected vendor/product fields as n/a, so version and platform scope must be confirmed against Microsoft MS05-004 and local asset data. Prioritize if any legacy ASP.NET applications remain internet-facing or protect sensitive business workflows. If the environment no longer runs affected-era ASP.NET Forms Authentication, urgency is lower but should still be documented through inventory evidence. Mitigation focus: Review Microsoft MS05-004 for affected platforms and required updates.; Patch applicable legacy .NET or ASP.NET installations according to vendor guidance.; Prioritize internet-facing ASP.NET applications using Forms Authentication..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.