Lucene search

K
cve[email protected]CVE-2022-41064
HistoryNov 09, 2022 - 10:15 p.m.

CVE-2022-41064

2022-11-0922:15:20
web.nvd.nist.gov
104
4
.net framework
information disclosure
vulnerability
cve-2022-41064
nvd

5.8 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.5%

.NET Framework Information Disclosure Vulnerability

Affected configurations

Vulners
NVD
Node
microsoftnugetRange1.0.0–2.1.2
OR
microsoftnugetRange1.0.0–4.8.4
OR
microsoft.net_frameworkRange4.8.0–4.8
OR
microsoft.net_frameworkRange4.8.0–4.8
OR
microsoft.net_frameworkRange4.8.0–4.8
OR
microsoft.net_frameworkRange4.8.0–4.8
OR
microsoft.net_frameworkRange4.8.0–4.8
OR
microsoft.net_frameworkRange4.8.0–4.8
OR
microsoft.net_frameworkRange4.8.0–4.8
OR
microsoft.net_frameworkRange3.0.0.0–4.7.2
OR
microsoft.net_frameworkRange10.0.0.0–4.7.2
OR
microsoft.net_frameworkRange4.8.0.0–4.8.1
OR
microsoft.net_frameworkRange4.8.0.0–4.8.1
OR
microsoft.net_frameworkRange4.7.0–4.7.2
OR
microsoft.net_frameworkRange4.7.0–4.7.2
OR
microsoft.net_frameworkRange4.7.0–4.7.2
OR
microsoft.net_frameworkRange4.7.0–4.7.2
OR
microsoft.net_frameworkRange4.7.0–4.7.2
OR
microsoft.net_frameworkRange4.7.0–4.6.2
OR
microsoft.net_frameworkRange4.7.0–4.6.2
OR
microsoft.net_frameworkRange10.0.0.0–4.6.2
VendorProductVersionCPE
microsoftnuget*cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*
microsoftnuget*cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*
microsoft.net_framework*cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*
microsoft.net_framework*cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*
microsoft.net_framework*cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*
microsoft.net_framework*cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*
microsoft.net_framework*cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*
microsoft.net_framework*cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*
microsoft.net_framework*cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*
microsoft.net_framework*cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 211

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Nuget 2.1.2",
    "cpes": [
      "cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "2.1.2",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Nuget 4.8.5",
    "cpes": [
      "cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "4.8.4",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 4.8",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows 10 Version 21H2 for ARM64-based Systems",
      "Windows Server 2012 R2",
      "Windows 10 Version 1809 for 32-bit Systems",
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "Windows Server 2019",
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "Windows 10 Version 21H1 for 32-bit Systems",
      "Windows 10 Version 1809 for x64-based Systems",
      "Windows 8.1 for x64-based systems",
      "Windows 8.1 for 32-bit systems",
      "Windows Server 2016",
      "Windows 10 Version 20H2 for ARM64-based Systems",
      "Windows 10 Version 1607 for 32-bit Systems",
      "Windows Server 2012",
      "Windows Server 2012 R2 (Server Core installation)",
      "Windows 10 Version 21H2 for 32-bit Systems",
      "Windows 7 for 32-bit Systems Service Pack 1",
      "Windows 10 Version 21H1 for x64-based Systems",
      "Windows RT 8.1",
      "Windows Server 2016 (Server Core installation)",
      "Windows Server 2012 (Server Core installation)",
      "Windows 10 Version 20H2 for 32-bit Systems",
      "Windows 10 Version 21H1 for ARM64-based Systems",
      "Windows 10 Version 1607 for x64-based Systems",
      "Windows 10 Version 21H2 for x64-based Systems",
      "Windows Server 2019 (Server Core installation)",
      "Windows 7 for x64-based Systems Service Pack 1",
      "Windows 10 Version 22H2 for x64-based Systems",
      "Windows 10 Version 22H2 for ARM64-based Systems",
      "Windows 11 version 21H2 for ARM64-based Systems",
      "Windows 10 Version 22H2 for 32-bit Systems",
      "Windows 11 version 21H2 for x64-based Systems",
      "Windows 10 Version 1809 for ARM64-based Systems",
      "Windows Server 2022",
      "Windows Server 2022 (Server Core installation)"
    ],
    "versions": [
      {
        "version": "4.8.0",
        "lessThan": "4.8.04584.08",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.8.0",
        "lessThan": "4.8.04005.02",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.8.0",
        "lessThan": "6.3.04585.01",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.8.0",
        "lessThan": "10.0.04585.02",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.8.0",
        "lessThan": "4.8.04585.02",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.8.0",
        "lessThan": "6.2.04585.01",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.8.0",
        "lessThan": "10.0.09110.12",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows 10 Version 1607 for 32-bit Systems",
      "Windows Server 2016",
      "Windows 10 Version 1607 for x64-based Systems",
      "Windows Server 2016 (Server Core installation)"
    ],
    "versions": [
      {
        "version": "3.0.0.0",
        "lessThan": "10.0.14393.5501",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 4.7.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows 10 Version 1809 for x64-based Systems",
      "Windows 10 Version 1809 for 32-bit Systems",
      "Windows 10 Version 1809 for ARM64-based Systems",
      "Windows Server 2019 (Server Core installation)",
      "Windows Server 2019"
    ],
    "versions": [
      {
        "version": "10.0.0.0",
        "lessThan": "10.0.04005.02",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 4.8.1",
    "cpes": [
      "cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows 10 Version 21H1 for x64-based Systems",
      "Windows 10 Version 21H1 for ARM64-based Systems",
      "Windows 10 Version 21H1 for 32-bit Systems",
      "Windows 10 Version 21H2 for 32-bit Systems",
      "Windows 10 Version 21H2 for ARM64-based Systems",
      "Windows 10 Version 21H2 for x64-based Systems",
      "Windows 11 Version 22H2 for x64-based Systems",
      "Windows 11 version 21H2 for ARM64-based Systems",
      "Windows 10 Version 22H2 for 32-bit Systems",
      "Windows 10 Version 22H2 for ARM64-based Systems",
      "Windows 11 Version 22H2 for ARM64-based Systems",
      "Windows 10 Version 22H2 for x64-based Systems",
      "Windows 11 version 21H2 for x64-based Systems",
      "Windows 10 Version 20H2 for ARM64-based Systems",
      "Windows 10 Version 20H2 for 32-bit Systems",
      "Windows Server 2022",
      "Windows Server 2022 (Server Core installation)"
    ],
    "versions": [
      {
        "version": "4.8.0.0",
        "lessThan": "4.8.09110.07",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.8.0.0",
        "lessThan": "4.8.04584.08",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2012 (Server Core installation)",
      "Windows 7 for x64-based Systems Service Pack 1",
      "Windows Server 2012",
      "Windows Server 2012 R2 (Server Core installation)",
      "Windows 8.1 for x64-based systems",
      "Windows 8.1 for 32-bit systems",
      "Windows RT 8.1",
      "Windows 7 for 32-bit Systems Service Pack 1",
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "Windows Server 2012 R2",
      "Windows Server 2008 R2 for x64-based Systems Service Pack 1"
    ],
    "versions": [
      {
        "version": "4.7.0",
        "lessThan": "4.7.04005.02",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.7.0",
        "lessThan": "6.2.04005.01",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.7.0",
        "lessThan": "6.0.04005.01",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.7.0",
        "lessThan": "4.8.04005.02",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.7.0",
        "lessThan": "6.3.04005.01",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 4.6.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows Server 2008 for x64-based Systems Service Pack 2",
      "Windows Server 2008 for 32-bit Systems Service Pack 2",
      "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
      "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"
    ],
    "versions": [
      {
        "version": "4.7.0",
        "lessThan": "4.7.04005.02",
        "versionType": "custom",
        "status": "affected"
      },
      {
        "version": "4.7.0",
        "lessThan": "6.0.04005.01",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft .NET Framework 4.6/4.6.2",
    "cpes": [
      "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Windows 10 for 32-bit Systems",
      "Windows 10 for x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0.0",
        "lessThan": "10.0.10240.19567",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Social References

More

5.8 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.5%