CVE-2020-1045

🗓️ 11 Sep 2020 00:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 196 Views

Security feature bypass vulnerability in Microsoft ASP.NET Core cookie parse

Reporter	Title	Published	Views	Family All 46
ALT Linux	Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.11-alt1	28 Jan 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.11-alt1	28 Jan 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities may affect IBM Robotic Process Automation	4 May 202218:53	–	ibm
Information Security Automation	Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange	30 Sep 202023:46	–	avleonov
Circl	CVE-2020-1045	11 Dec 202307:26	–	circl
CNVD	Microsoft .NET Core and ASP.NET Core Security Feature Bypass Vulnerability	10 Sep 202000:00	–	cnvd
Cvelist	CVE-2020-1045 Microsoft ASP.NET Core Security Feature Bypass Vulnerability	11 Sep 202000:00	–	cvelist
Oracle linux	.NET Core 3.1 security and bugfix update	11 Sep 202000:00	–	oraclelinux
Fedora	[SECURITY] Fedora 33 Update: dotnet3.1-3.1.108-1.fc33	2 Oct 202000:36	–	fedora
Fedora	[SECURITY] Fedora 32 Update: dotnet3.1-3.1.108-1.fc32	16 Sep 202014:44	–	fedora

NVD

Vulners

Node

microsoft asp.net_coreRange2.1–2.1.21

microsoft asp.net_coreRange3.1–3.1.8

Node

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

Node

redhat enterprise_linuxMatch8.0

redhat enterprise_linux_ausMatch8.2

redhat enterprise_linux_ausMatch8.4

redhat enterprise_linux_ausMatch8.6

redhat enterprise_linux_eusMatch8.2

redhat enterprise_linux_eusMatch8.4

redhat enterprise_linux_eusMatch8.6

redhat enterprise_linux_tusMatch8.2

redhat enterprise_linux_tusMatch8.4

redhat enterprise_linux_tusMatch8.6

[
  {
    "vendor": "Microsoft",
    "product": "ASP.NET Core 2.1",
    "cpes": [
      "cpe:2.3:a:microsoft:asp.net_core:2.1*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "2.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "ASP.NET Core 3.1",
    "cpes": [
      "cpe:2.3:a:microsoft:asp.net_core:3.1:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "3.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2020:3699
github	www.github.com/dotnet/core/blob/main/release-notes/3.1/3.1.8/3.1.8.md
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LN2FUVBSVPGK7AU3NMLO3YR6CGONQPB/
security	www.security.snyk.io/vuln/SNYK-RHEL8-DOTNET-1439600
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ASICXQXS4M7MTAF6SGQMCLCA63DLCUT3/
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1045

23 Feb 2026 18:23Current

7.6High risk

Vulners AI Score7.6

CVSS 25

CVSS 3.17.5

EPSS0.20401

SSVC