PRIOn knowledge basePRION:CVE-2018-0787

HistoryMar 14, 2018 - 5:29 p.m.

Privilege escalation

2018-03-1417:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.7%

JSON

ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka “ASP.NET Core Elevation Of Privilege Vulnerability”.

CPENameOperatorVersion
asp.net_coreeq1.0
asp.net_coreeq1.1
asp.net_coreeq2.0

Name	Operator	Version
asp.net_core	eq	1.0
asp.net_core	eq	1.1
asp.net_core	eq	2.0

References

www.securityfocus.com/bid/103282

www.securitytracker.com/id/1040525

github.com/aspnet/Announcements/issues/295

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0787