Описание
.NET and Visual Studio Information Disclosure Vulnerability
A flaw was found in the .NET platform. This issue may lead to the disclosure of sensitive information via TlsStream.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | dotnet8.0 | Affected | ||
| Red Hat Enterprise Linux 8 | dotnet8.0 | Fixed | RHSA-2024:5337 | 13.08.2024 |
| Red Hat Enterprise Linux 9 | dotnet8.0 | Fixed | RHSA-2024:5334 | 15.08.2024 |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=2302428dotnet8.0: Information disclosure vulnerability in TlsStream
EPSS
Процентиль: 73%
0.0078
Низкий
6.5 Medium
CVSS3
Связанные уязвимости
CVSS3: 6.5
ubuntu
10 месяцев назад
.NET and Visual Studio Information Disclosure Vulnerability
CVSS3: 6.5
nvd
10 месяцев назад
.NET and Visual Studio Information Disclosure Vulnerability
CVSS3: 6.5
msrc
10 месяцев назад
.NET and Visual Studio Information Disclosure Vulnerability
CVSS3: 6.5
github
10 месяцев назад
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability
EPSS
Процентиль: 73%
0.0078
Низкий
6.5 Medium
CVSS3