Test ID:	1.3.6.1.4.1.25623.1.0.814093
Category:	Windows
Title:	.NET Core Information Disclosure Vulnerability (Oct 2018) - Windows
Summary:	.NET Core is prone to an information disclosure vulnerability.
Description:	Summary: .NET Core is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw exists when .NET Core when HTTP authentication information is inadvertently exposed in an outbound request that encounters an HTTP redirect. Vulnerability Impact: Successful exploitation will allow attackers to disclose sensitive information and use the information to further compromise the web application. Affected Software/OS: .NET Core 1.0.x runtime 1.0.12 or lower, .NET Core 1.1.x runtime 1.1.9 or lower, .NET Core 2.0.x runtime, .NET Core SDK prior to version 1.1.11. Solution: Upgrade to 1.0.13, 1.1.10 or 2.1 or later for .NET Core runtimes and to 1.1.11 for .NET Core SDK. Please see the references for more information. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-8292 BugTraq ID: 105548 http://www.securityfocus.com/bid/105548 RedHat Security Advisories: RHSA-2018:2902 https://access.redhat.com/errata/RHSA-2018:2902
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.