Improper Certificate Validation in Microsoft .NET Framework components

🗓️ 14 May 2022 03:00:10Reported by GitHub Advisory DatabaseType

Improper Certificate Validation in .NET Framewor

Reporter	Title	Published	Views	Family All 77
CNVD	Microsoft .NET Framework Security Bypass Vulnerability (CNVD-2018-15854)	12 Jul 201800:00	–	cnvd
CVE	CVE-2018-8356	11 Jul 201800:00	–	cve
Cvelist	CVE-2018-8356	11 Jul 201800:00	–	cvelist
EUVD	EUVD-2022-4735	3 Oct 202520:07	–	euvd
Microsoft KB	Description of the Security and Quality Rollup updates for .NET Framework 4.5.2 for Windows 8.1, RT 8.1, and Server 2012 R2 (KB 4338415)	10 Jul 201807:00	–	mskb
Microsoft KB	Description of the Security and Quality Rollup updates for .NET Framework 4.5.2 for Windows Server 2012 (KB 4338416)	10 Jul 201807:00	–	mskb
Microsoft KB	Description of the Security and Quality Rollup updates for .NET Framework 4.5.2 for Windows 7 SP1, Server 2008 R2 SP1, and Server 2008 (KB 4338417)	10 Jul 201807:00	–	mskb
Microsoft KB	Description of the Security and Quality Rollup updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows Server 2012 (KB 4338418)	10 Jul 201807:00	–	mskb
Microsoft KB	Description of the Security and Quality Rollup updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 8.1, RT 8.1, and Server 2012 R2 (KB 4338419)	10 Jul 201807:00	–	mskb
Microsoft KB	Description of the Security and Quality Rollup updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 7 SP1 and Server 2008 R2 SP1, and for .NET Framework 4.6 for Server 2008 (KB 4338420)	10 Jul 201807:00	–	mskb

Vulners

Node

system.servicemodel.securityRange4.0.0–4.0.2nuget

system.servicemodel.duplexRange4.0.0–4.0.2nuget

system.servicemodel.securityRange4.5.0–4.5.3nuget

system.servicemodel.securityRange4.4.0–4.4.4nuget

system.servicemodel.securityRange4.3.0–4.3.3nuget

system.servicemodel.primitivesRange4.0.0–4.1.3nuget

system.servicemodel.primitivesRange4.5.0–4.5.3nuget

system.servicemodel.primitivesRange4.4.0–4.4.4nuget

system.servicemodel.primitivesRange4.3.0–4.3.3nuget

system.servicemodel.nettcpRange4.0.0–4.1.3nuget

system.servicemodel.nettcpRange4.5.0–4.5.3nuget

system.servicemodel.nettcpRange4.4.0–4.4.4nuget

system.servicemodel.nettcpRange4.3.0–4.3.3nuget

system.servicemodel.httpRange4.0.0–4.1.3nuget

system.servicemodel.httpRange4.5.0–4.5.3nuget

system.servicemodel.httpRange4.4.0–4.4.4nuget

system.servicemodel.httpRange4.3.0–4.3.3nuget

system.servicemodel.duplexRange4.5.0–4.5.3nuget

system.servicemodel.duplexRange4.4.0–4.4.4nuget

system.servicemodel.duplexRange4.3.0–4.3.3nuget

system.private.servicemodelRange4.5.0–4.5.3nuget

system.private.servicemodelRange4.4.0–4.4.4nuget

system.private.servicemodelRange4.3.0–4.3.3nuget

system.private.servicemodelRange4.0.0–4.1.3nuget

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-8356
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8356
github	www.github.com/dotnet/announcements/issues/73
github	www.github.com/github/advisory-database/issues/302
github	www.github.com/advisories/GHSA-p9wx-v264-q34p

29 Jan 2023 05:02Current

2.4Low risk

Vulners AI Score2.4

CVSS 22.1

CVSS 35.5

EPSS0.00212