Test ID:	1.3.6.1.4.1.25623.1.0.812097
Category:	Windows
Title:	Microsoft ASP.NET Core Information Disclosure Vulnerability
Summary:	This host is missing an important security; update according to Microsoft advisory (CVE-2017-8700).
Description:	Summary: This host is missing an important security update according to Microsoft advisory (CVE-2017-8700). Vulnerability Insight: The flaw exists due to an unspecified error where Cross-Origin Resource Sharing (CORS) can be bypassed. Vulnerability Impact: Successful exploitation will allow remote attackers to gain access to potentially sensitive information. Affected Software/OS: Microsoft ASP.NET Core 1.0 and ASP.NET Core 1.1 using 'Microsoft.AspNetCore.Mvc.Core' package or 'Microsoft.AspNetCore.Mvc.Cors' package versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.1.0, 1.1.1, 1.1.2, 1.1.3 and 1.1.4. Solution: Upgrade to Microsoft ASP.NET Core 2.0 or higher. For Microsoft ASP.NET Core 1.x upgrade 'Microsoft.AspNetCore.Mvc.Core' and 'Microsoft.AspNetCore.Mvc.Cors' packages to version 1.0.6 or 1.1.5 or later. Please see the references for more info. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-8700 BugTraq ID: 101712 http://www.securityfocus.com/bid/101712 http://www.securitytracker.com/id/1039793
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.