ID de Prueba:	1.3.6.1.4.1.25623.1.0.812097
Categoría:	Windows
Título:	Microsoft ASP.NET Core Information Disclosure Vulnerability
Resumen:	This host is missing an important security; update according to Microsoft advisory (CVE-2017-8700).
Descripción:	Summary: This host is missing an important security update according to Microsoft advisory (CVE-2017-8700). Vulnerability Insight: The flaw exists due to an unspecified error where Cross-Origin Resource Sharing (CORS) can be bypassed. Vulnerability Impact: Successful exploitation will allow remote attackers to gain access to potentially sensitive information. Affected Software/OS: Microsoft ASP.NET Core 1.0 and ASP.NET Core 1.1 using 'Microsoft.AspNetCore.Mvc.Core' package or 'Microsoft.AspNetCore.Mvc.Cors' package versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.1.0, 1.1.1, 1.1.2, 1.1.3 and 1.1.4. Solution: Upgrade to Microsoft ASP.NET Core 2.0 or higher. For Microsoft ASP.NET Core 1.x upgrade 'Microsoft.AspNetCore.Mvc.Core' and 'Microsoft.AspNetCore.Mvc.Cors' packages to version 1.0.6 or 1.1.5 or later. Please see the references for more info. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-8700 BugTraq ID: 101712 http://www.securityfocus.com/bid/101712 http://www.securitytracker.com/id/1039793
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.