Lucene search

[email protected]NVD:CVE-2024-21319

HistoryJan 09, 2024 - 7:15 p.m.

CVE-2024-21319

2024-01-0919:15:12

CWE-20

[email protected]

web.nvd.nist.gov

microsoft

identity

denial of service

vulnerability

cve-2024-21319

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

32.9%

JSON

Microsoft Identity Denial of service vulnerability

Affected configurations

Nvd

Node

microsoft.netRange6.0.0–6.0.26

microsoft.netRange7.0.0–7.0.15

microsoft.netRange8.0.0–8.0.1

microsoftidentity_modelRange5.0.0–5.7.0.net

microsoftidentity_modelRange6.0.0–6.34.0.net

microsoftidentity_modelRange7.0.0–7.1.2.net

microsoftvisual_studio_2022Range17.2.0–17.2.23

microsoftvisual_studio_2022Range17.4.0–17.4.15

microsoftvisual_studio_2022Range17.6.0–17.6.11

microsoftvisual_studio_2022Range17.8.0–17.8.4

VendorProductVersionCPE
microsoft.net*cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
microsoftidentity_model*cpe:2.3:a:microsoft:identity_model:*:*:*:*:*:.net:*:*
microsoftvisual_studio_2022*cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	.net	*	cpe:2.3:a:microsoft:.net::::::::
microsoft	identity_model	*	cpe:2.3:a:microsoft:identity_model::::::.net::*
microsoft	visual_studio_2022	*	cpe:2.3:a:microsoft:visual_studio_2022::::::::