KLA62822 Multiple vulnerabilities in Microsoft Developer Tools

🗓️ 09 Jan 2024 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 145 Views

Multiple vulnerabilities in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges

Reporter	Title	Published	Views	Family All 327
IBM Security Bulletins	Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in jsonwebtokens	19 Oct 202614:20	–	ibm
IBM Security Bulletins	Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in Microsoft.Data.SqlClient	19 Oct 202614:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to a denial of service in Grafana. (CVE-2024-21319)	24 Jul 202418:50	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Microsoft .NET Core affects IBM Robotic Process Automation and may result in a bypass of security restrictions (CVE-2024-0056)	5 Jun 202420:26	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Microsoft Azure Identity affects IBM Robotic Process Automation and may result in a denial of service (CVE-2024-21319)	5 Jun 202417:52	–	ibm
IBM Security Bulletins	Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in Microsoft.Data.SqlClient	19 Oct 202614:22	–	ibm
GithubExploit	Exploit for Link Following in Microsoft	12 Jan 202415:08	–	githubexploit
Tenable Nessus	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2024-489)	23 Jan 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2024-545)	6 Mar 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : .NET 8.0 (ALSA-2024:0150)	12 Jan 202400:00	–	nessus

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0056
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20672
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20656
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21319
threats	www.threats.kaspersky.com/en/class/Exploit/
threats	www.threats.kaspersky.com/en/product/Microsoft-.NET-Framework/
threats	www.threats.kaspersky.com/en/product/Microsoft-Visual-Studio/
threats	www.threats.kaspersky.com/en/product/.NET/

25 Aug 2026 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.19.1 - 9.8

EPSS0.03946

SSVC