Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-655Q-9GVG-Q4CM
HistoryMay 24, 2022 - 5:06 p.m.

Remote code execution in ASP.NET Core

2022-05-2417:06:16
CWE-119
GitHub Advisory Database
github.com
19
asp.net core
remote code execution
vulnerability
arbitrary code
user context

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.024

Percentile

90.0%

JSON

A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka ‘ASP.NET Core Remote Code Execution Vulnerability’.

Affected configurations

Vulners
Node
microsoftaspnetcore.app.runtime.win-x86Range3.1.0–3.1.1
OR
microsoftaspnetcore.app.runtime.win-x64Range3.1.0–3.1.1
OR
microsoftaspnetcore.app.runtime.win-armRange3.1.0–3.1.1
OR
microsoftaspnetcore.app.runtime.osx-x64Range3.1.0–3.1.1
OR
microsoftaspnetcore.app.runtime.linux-x64Range3.1.0–3.1.1
OR
microsoftaspnetcore.app.runtime.linux-musl-x64Range3.1.0–3.1.1
OR
microsoftaspnetcore.app.runtime.linux-musl-arm64Range3.1.0–3.1.1
OR
microsoftaspnetcore.app.runtime.linux-arm64Range3.1.0–3.1.1
OR
microsoftaspnetcore.app.runtime.linux-armRange3.1.0–3.1.1
OR
microsoftaspnetcore.http.connectionsRange1.0.0–1.0.15
OR
microsoftaspnetcore.appRange2.1.0–2.1.15
OR
microsoftaspnetcore.appMatch3.0.0
OR
microsoftaspnetcore.appMatch3.1.0
OR
microsoftaspnetcore.allRange2.1.0–2.1.15
VendorProductVersionCPE
microsoftaspnetcore.app.runtime.win-x86*cpe:2.3:a:microsoft:aspnetcore.app.runtime.win-x86:*:*:*:*:*:*:*:*
microsoftaspnetcore.app.runtime.win-x64*cpe:2.3:a:microsoft:aspnetcore.app.runtime.win-x64:*:*:*:*:*:*:*:*
microsoftaspnetcore.app.runtime.win-arm*cpe:2.3:a:microsoft:aspnetcore.app.runtime.win-arm:*:*:*:*:*:*:*:*
microsoftaspnetcore.app.runtime.osx-x64*cpe:2.3:a:microsoft:aspnetcore.app.runtime.osx-x64:*:*:*:*:*:*:*:*
microsoftaspnetcore.app.runtime.linux-x64*cpe:2.3:a:microsoft:aspnetcore.app.runtime.linux-x64:*:*:*:*:*:*:*:*
microsoftaspnetcore.app.runtime.linux-musl-x64*cpe:2.3:a:microsoft:aspnetcore.app.runtime.linux-musl-x64:*:*:*:*:*:*:*:*
microsoftaspnetcore.app.runtime.linux-musl-arm64*cpe:2.3:a:microsoft:aspnetcore.app.runtime.linux-musl-arm64:*:*:*:*:*:*:*:*
microsoftaspnetcore.app.runtime.linux-arm64*cpe:2.3:a:microsoft:aspnetcore.app.runtime.linux-arm64:*:*:*:*:*:*:*:*
microsoftaspnetcore.app.runtime.linux-arm*cpe:2.3:a:microsoft:aspnetcore.app.runtime.linux-arm:*:*:*:*:*:*:*:*
microsoftaspnetcore.http.connections*cpe:2.3:a:microsoft:aspnetcore.http.connections:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

Related

veracode 1
prion 1
mscve 1
osv 3
cvelist 1
nvd 1
redhatcve 1
cve 1
symantec 1
redhat 2
nessus 6
oraclelinux 1
openvas 2
kaspersky 1
talosblog 1
veracode
veracode
Remote Code Execution (RCE)
2020-01-16 08:10:38
prion
prion
Remote code execution
2020-01-14 23:15:00
mscve
mscve
ASP.NET Core Remote Code Execution Vulnerability
2020-01-14 08:00:00
osv
osv
BIT-aspnet-core-2020-0603
2024-03-06 10:54:18
Remote code execution in ASP.NET Core
2022-05-24 17:06:16
CVE-2020-0603
2020-01-14 23:15:30
cvelist
cvelist
CVE-2020-0603
2020-01-14 23:11:21
nvd
nvd
CVE-2020-0603
2020-01-14 23:15:30
redhatcve
redhatcve
CVE-2020-0603
2020-01-14 20:09:07
cve
cve
CVE-2020-0603
2020-01-14 23:15:30
symantec
symantec
Microsoft ASP.NET Core CVE-2020-0603 Remote Code Execution Vulnerability
2020-01-14 00:00:00
redhat
redhat
(RHSA-2020:0130) Critical: .NET Core on Red Hat Enterprise Linux security and bug fix update
2020-01-16 14:41:13
(RHSA-2020:0134) Critical: .NET Core on Red Hat Enterprise Linux security and bug fix update
2020-01-16 16:17:47
nessus
nessus
Oracle Linux 8 : .NET / Core / Enterprise / Hat / Linux / Red / on (ELSA-2020-0130)
2020-01-21 00:00:00
RHEL 7 : .NET Core on Red Hat Enterprise Linux (RHSA-2020:0134)
2020-01-21 00:00:00
CentOS 8 : .NET Core on Red Hat Enterprise Linux (CESA-2020:0130)
2021-02-01 00:00:00
oraclelinux
oraclelinux
.NET Core on Red Hat Enterprise Linux security and bug fix update
2020-01-20 00:00:00
openvas
openvas
ASP.NET Core 3.0.x < 3.0.2, 3.1.0 Multiple Vulnerabilities (Jan 2020)
2020-01-16 00:00:00
ASP.NET Core SDK 3.0.x < 3.0.102, 3.1.x < 3.1.101 Multiple Vulnerabilities (Jan 2020)
2020-01-16 00:00:00
kaspersky
kaspersky
KLA11634 Multiple vulnerabilities in Microsoft Developer Tools
2020-01-14 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday — Jan. 2020: Vulnerability disclosures and Snort coverage
2020-01-17 10:14:27

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.024

Percentile

90.0%

JSON
Related for GHSA-655Q-9GVG-Q4CM
veracode1prion1mscve1osv3cvelist1nvd1redhatcve1cve1symantec1redhat2nessus6oraclelinux1openvas2kaspersky1talosblog1