Описание
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Hardened Images | dotnet10.0 | Not affected | ||
| Red Hat Hardened Images | dotnet8.0 | Not affected | ||
| Red Hat Hardened Images | dotnet9.0 | Not affected | ||
| Red Hat Enterprise Linux 10 | dotnet8.0 | Fixed | RHSA-2026:86168 | 20.10.2026 |
| Red Hat Enterprise Linux 10 | dotnet9.0 | Fixed | RHSA-2026:86172 | 20.10.2026 |
| Red Hat Enterprise Linux 10 | dotnet10.0 | Fixed | RHSA-2026:86195 | 20.10.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | dotnet9.0 | Fixed | RHSA-2026:88424 | 22.10.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | dotnet8.0 | Fixed | RHSA-2026:88474 | 22.10.2026 |
| Red Hat Enterprise Linux 8 | dotnet9.0 | Fixed | RHSA-2026:86170 | 20.10.2026 |
| Red Hat Enterprise Linux 8 | dotnet10.0 | Fixed | RHSA-2026:86192 | 20.10.2026 |
Показывать по
10
Дополнительная информация
Статус:
Important
Дефект:
CWE-640
https://bugzilla.redhat.com/show_bug.cgi?id=2548787dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability
EPSS
Процентиль: 54%
0.00729
Низкий
8.1 High
CVSS3
Связанные уязвимости
CVSS3: 8.1
ubuntu
14 дней назад
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
CVSS3: 8.1
nvd
13 дней назад
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
CVSS3: 8.1
github
13 дней назад
Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability
EPSS
Процентиль: 54%
0.00729
Низкий
8.1 High
CVSS3