Описание
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Отчет
An elevation of privilege flaw, rated IMPORTANT by Red Hat Product Security, was found in the Blazor AuthorizeRouteView component of ASP.NET Core. Due to improper synchronization of concurrent execution using a shared resource (a race condition), a stale asynchronous authorization result can be applied after navigation or an authorization-state change, bypassing the current [Authorize] decision. An authorized remote attacker with low privileges could exploit this issue over a network, with high attack complexity, to elevate privileges within the application, affecting confidentiality, integrity, and availability (CVSS 3.1: 7.5, CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Red Hat products that ship the affected ASP.NET Core Runtime, tracked under the dotnet, dotnet8.0, dotnet9.0, and dotnet10.0 components, are affected across the impacted streams and a fix is being pursued. The Red Hat severity assessment (IMPORTANT, CVSS 7.5) is consistent with the upstream CVSS score of 7.5.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. The upstream advisory states that the issue is fixed in ASP.NET Core Runtime 8.0.32, 9.0.21, and 10.0.13 (and 11.0.0-rc.2 for the .NET 11 pre-release channel); users should apply the patched versions of the affected .NET components for their Red Hat offerings once available.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Hardened Images | dotnet10.0 | Not affected | ||
| Red Hat Hardened Images | dotnet8.0 | Not affected | ||
| Red Hat Hardened Images | dotnet9.0 | Not affected | ||
| Red Hat Enterprise Linux 10 | dotnet8.0 | Fixed | RHSA-2026:86168 | 20.10.2026 |
| Red Hat Enterprise Linux 10 | dotnet9.0 | Fixed | RHSA-2026:86172 | 20.10.2026 |
| Red Hat Enterprise Linux 10 | dotnet10.0 | Fixed | RHSA-2026:86195 | 20.10.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | dotnet9.0 | Fixed | RHSA-2026:88424 | 22.10.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | dotnet8.0 | Fixed | RHSA-2026:88474 | 22.10.2026 |
| Red Hat Enterprise Linux 8 | dotnet9.0 | Fixed | RHSA-2026:86170 | 20.10.2026 |
| Red Hat Enterprise Linux 8 | dotnet10.0 | Fixed | RHSA-2026:86192 | 20.10.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability
EPSS
7.5 High
CVSS3