ViewStateMac is Not Enabled
Description
Invicti detected that MAC validation is not enabled for the ViewState. An attacked can tamper with the ViewState and potentially exploit the application.
Remediation
ASP.NET uses a hash code-based integrity solution called "ViewStateMac" to protect ViewState parameters against tampering attacks. You can implement this solution on a page or application level.