Looking for the vulnerability index of Invicti's legacy products?
ViewsState is not Encrypted - Vulnerability Database

ViewsState is not Encrypted

Description

The __VIEWSTATE parameter is not encrypted for one or more pages. To reduce the chance of someone intercepting the information stored in the ViewState, it is good design to encrypt the ViewState.

Remediation

Turn on the encryption mode for the view state. Consult web references for more information, taking into consideration ASP.NET version