CVE ID:	CVE-2013-1337
Description:	Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (WCF) endpoint authentication in certain situations involving passwords over HTTPS, which allows remote attackers to bypass authentication by sending queries to an endpoint, aka "Authentication Bypass Vulnerability."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1337 Cert/CC Advisory: TA13-134A http://www.us-cert.gov/ncas/alerts/TA13-134A Microsoft Security Bulletin: MS13-040 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-040 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16741