Information Disclosure

🗓️ 11 Oct 2018 08:16:36Reported by Veracode Vulnerability DatabaseType

System.Net.Http vulnerability in authentication headers clearing during redirectio

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities may affect IBM Robotic Process Automation	12 May 202201:34	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Microsoft .NET Core may affect IBM Robotic Process Automation and result in a remote attacker obtaining sensitive information (CVE-2018-8292).	2 Dec 202415:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in microsoft.netcore.app affect IBM Robotic Process Automation.	7 Oct 202422:27	–	ibm
CNVD	Microsoft .NET Core and PowerShell Core Information Disclosure Vulnerability	12 Oct 201800:00	–	cnvd
CVE	CVE-2018-8292	10 Oct 201813:00	–	cve
Cvelist	CVE-2018-8292	10 Oct 201813:00	–	cvelist
EUVD	EUVD-2021-0791	7 Oct 202500:30	–	euvd
Github Security Blog	.NET Core Information Disclosure	21 Apr 202119:16	–	github
Kaspersky	KLA11330 Multiple vulnerabilities in Microsoft Developer Tools	9 Oct 201800:00	–	kaspersky
Microsoft CVE	.NET Core Information Disclosure Vulnerability	9 Oct 201807:00	–	mscve

Vulners

Node

microsoft system.net.httpRange4.3.0–4.3.3csharp

microsoft system.net.httpRange4.0.0-beta-22416–4.1.3csharp

microsoft system.net.httpRange2.0.20126.16343–2.0.20710csharp

Source	Link
github	www.github.com/dotnet/corefx/issues/26426
github	www.github.com/dotnet/corefx/commit/7e6396b2bcb4d372b199cfb7b3b13e290c441124
github	www.github.com/dotnet/corefx/issues/32730
securityfocus	www.securityfocus.com/bid/105548
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8292
access	www.access.redhat.com/errata/RHSA-2018:2902

21 Oct 2019 03:43Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 37.5

EPSS0.08142