Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CWE-290