CVE-2020-1045 Microsoft ASP.NET Core Security Feature Bypass Vulnerability

🗓️ 11 Sep 2020 00:00:00Reported by microsoftType

Microsoft ASP.NET Core Security Bypass Vulnerability CVE-2020-104

Reporter	Title	Published	Views	Family All 46
ALT Linux	Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.11-alt1	28 Jan 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.11-alt1	28 Jan 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities may affect IBM Robotic Process Automation	4 May 202218:53	–	ibm
Information Security Automation	Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange	30 Sep 202023:46	–	avleonov
BDU FSTEC	The vulnerability of the ASP.NET Core software platform’s cookie analyzer allows a hacker to bypass security functions.	7 Oct 202000:00	–	bdu_fstec
Circl	CVE-2020-1045	11 Dec 202307:26	–	circl
CNVD	Microsoft .NET Core and ASP.NET Core Security Feature Bypass Vulnerability	10 Sep 202000:00	–	cnvd
CVE	CVE-2020-1045	11 Sep 202000:00	–	cve
Oracle linux	.NET Core 3.1 security and bugfix update	11 Sep 202000:00	–	oraclelinux
Fedora	[SECURITY] Fedora 33 Update: dotnet3.1-3.1.108-1.fc33	2 Oct 202000:36	–	fedora

[
  {
    "vendor": "Microsoft",
    "product": "ASP.NET Core 2.1",
    "cpes": [
      "cpe:2.3:a:microsoft:asp.net_core:2.1*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "2.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "ASP.NET Core 3.1",
    "cpes": [
      "cpe:2.3:a:microsoft:asp.net_core:3.1:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "3.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2020:3699
github	www.github.com/dotnet/core/blob/main/release-notes/3.1/3.1.8/3.1.8.md
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LN2FUVBSVPGK7AU3NMLO3YR6CGONQPB/
security	www.security.snyk.io/vuln/SNYK-RHEL8-DOTNET-1439600
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ASICXQXS4M7MTAF6SGQMCLCA63DLCUT3/
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1045

31 Dec 2023 21:34Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.20401