KLA11554 Multiple vulnerabilities in Microsoft Developer tools

🗓️ 10 Sep 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 63 Views

Multiple vulnerabilities in Microsoft Developer tools. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code, spoof user interface, obtain sensitive information

Reporter	Title	Published	Views	Family All 145
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities may affect IBM Robotic Process Automation	4 May 202218:53	–	ibm
BDU FSTEC	The vulnerability of the Microsoft .NET Framework software, related to privilege management errors, allows a perpetrator to elevate their privileges.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for ensuring the interaction of application copies on various devices and platforms under Project Rome SDK allows a perpetrator to gain unauthorized access to protected information, due to errors in authenticating certificate authenticity.	17 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment for Windows operating systems allows a hacker to escalate their privileges.	17 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ASP.NET Core software platform, related to errors in handling web requests, allows attackers to escalate their privileges and execute cross-site scripting attacks.	1 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Team Foundation Server and Azure DevOps Server software development tools lies in the lack of protective measures for the website structure, allowing attackers to execute cross-site scripting attacks.	1 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software development tools Team Foundation Server and Azure DevOps Server lies in insufficient validation of input data, allowing a hacker to execute arbitrary code.	1 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the .NET Core software platform, related to errors in handling web requests, allows attackers to trigger a service failure.	29 May 202000:00	–	bdu_fstec
Tenable Nessus	CentOS 8 : .NET Core on Red Hat Enterprise Linux (CESA-2019:2731)	29 Jan 202100:00	–	nessus
Tenable Nessus	Oracle Linux 8 : .NET / Core / on / Red / Hat / Enterprise / Linux (ELSA-2019-2731)	16 Sep 201900:00	–	nessus

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1232
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1302
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1301
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1306
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1305
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1231
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1142
threats	www.threats.kaspersky.com/en/product/Microsoft-.NET-Framework/
threats	www.threats.kaspersky.com/en/product/Microsoft-Visual-Studio/
threats	www.threats.kaspersky.com/en/product/Microsoft-Windows/