ID de Prueba:	1.3.6.1.4.1.25623.1.0.832386
Categoría:	Windows
Título:	.NET Core Multiple Vulnerabilities (KB5029688, KB5029689) - Windows
Resumen:	.NET Core prone to security feature bypass; and elevation of privilege vulnerabilities.
Descripción:	Summary: .NET Core prone to security feature bypass and elevation of privilege vulnerabilities. Vulnerability Insight: Multiple flaws exist due to, - A vulnerability exists when some dotnet commands are used in directories with weaker permissions which can result in remote code execution. - A vulnerability exists in Kestrel where, on detecting a potentially malicious client, Kestrel will sometimes fail to disconnect it, resulting in denial of service. Vulnerability Impact: Successful exploitation would allow an attacker to bypass security restrictions, achieve cross-session/cross-user elevation of privilege (EoP) and code execution. Affected Software/OS: .NET Core runtime 6.0 before 6.0.21, 7.0 before 7.0.10 and .NET Core SDK before 6.0.121, 6.0.316, 7.0.400. Solution: Upgrade to versions 6.0.21 or 7.0.10 or later or upgrade .NET Core SDK to versions 6.0.121 or 6.0.316 or 7.0.400 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35390 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CL2L4WE5QRT7WEXANYXSKSU43APC5N2V/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWVZFKTLNMNKPZ755EMRYIA6GHFOWGKY/ Common Vulnerability Exposure (CVE) ID: CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180 Common Vulnerability Exposure (CVE) ID: CVE-2023-35391 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35391 Common Vulnerability Exposure (CVE) ID: CVE-2023-38178 .NET Core and Visual Studio Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38178
Copyright	Copyright (C) 2023 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.