Описание
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.
Отчет
Red Hat rates this vulnerability as Moderate impact because information exposure is limited to environments where credentials are explicitly configured within Git remote URLs and compiled artifacts are shared externally. The flaw does not grant remote code execution or direct compromise of deployed .NET services, but rather risks credential leakage through generated binary and debug metadata. Consequently, exposure is confined to build-time workflows with non-standard Git configurations and depends on distributing the produced assemblies to untrusted recipients.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Dev Spaces | devspaces/udi-rhel9 | Fix deferred | ||
| Red Hat Enterprise Linux 10 | dotnet8.0 | Fixed | RHSA-2026:54541 | 13.08.2026 |
| Red Hat Enterprise Linux 10 | dotnet9.0 | Fixed | RHSA-2026:54590 | 13.08.2026 |
| Red Hat Enterprise Linux 10 | dotnet10.0 | Fixed | RHSA-2026:55858 | 17.08.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | dotnet8.0 | Fixed | RHSA-2026:58566 | 24.08.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | dotnet9.0 | Fixed | RHSA-2026:58567 | 24.08.2026 |
| Red Hat Enterprise Linux 8 | dotnet8.0 | Fixed | RHSA-2026:54538 | 13.08.2026 |
| Red Hat Enterprise Linux 8 | dotnet10.0 | Fixed | RHSA-2026:54542 | 13.08.2026 |
| Red Hat Enterprise Linux 8 | dotnet9.0 | Fixed | RHSA-2026:54550 | 13.08.2026 |
| Red Hat Enterprise Linux 9 | dotnet8.0 | Fixed | RHSA-2026:54574 | 13.08.2026 |
Показывать по
Дополнительная информация
Статус:
5.9 Medium
CVSS3
Связанные уязвимости
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.
5.9 Medium
CVSS3