Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-62900

Опубликовано: 11 авг. 2026
Источник: redhat
CVSS3: 5.9

Описание

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

Отчет

Red Hat rates this vulnerability as Moderate impact because information exposure is limited to environments where credentials are explicitly configured within Git remote URLs and compiled artifacts are shared externally. The flaw does not grant remote code execution or direct compromise of deployed .NET services, but rather risks credential leakage through generated binary and debug metadata. Consequently, exposure is confined to build-time workflows with non-standard Git configurations and depends on distributing the produced assemblies to untrusted recipients.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenShift Dev Spacesdevspaces/udi-rhel9Fix deferred
Red Hat Enterprise Linux 10dotnet8.0FixedRHSA-2026:5454113.08.2026
Red Hat Enterprise Linux 10dotnet9.0FixedRHSA-2026:5459013.08.2026
Red Hat Enterprise Linux 10dotnet10.0FixedRHSA-2026:5585817.08.2026
Red Hat Enterprise Linux 10.0 Extended Update Supportdotnet8.0FixedRHSA-2026:5856624.08.2026
Red Hat Enterprise Linux 10.0 Extended Update Supportdotnet9.0FixedRHSA-2026:5856724.08.2026
Red Hat Enterprise Linux 8dotnet8.0FixedRHSA-2026:5453813.08.2026
Red Hat Enterprise Linux 8dotnet10.0FixedRHSA-2026:5454213.08.2026
Red Hat Enterprise Linux 8dotnet9.0FixedRHSA-2026:5455013.08.2026
Red Hat Enterprise Linux 9dotnet8.0FixedRHSA-2026:5457413.08.2026

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-212
https://bugzilla.redhat.com/show_bug.cgi?id=2512179.NET: .NET Information Disclosure Vulnerability

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.9
ubuntu
3 месяца назад

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

CVSS3: 5.9
nvd
3 месяца назад

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

CVSS3: 5.9
msrc
3 месяца назад

.NET Information Disclosure Vulnerability

CVSS3: 5.9
redos
2 месяца назад

Уязвимость dotnet10.0

CVSS3: 5.9
redos
2 месяца назад

Уязвимость dotnet8.0

5.9 Medium

CVSS3