CVE-2018-8292

EUVD-2021-0791
An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
microsoftasp.net_core
1.0
microsoftasp.net_core
1.1
microsoftasp.net_core
2.1
microsoftpowershell_core
6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mono
bionic
not-affected
trusty
not-affected
xenial
not-affected
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/105548
https://access.redhat.com/errata/RHSA-2018:2902
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8292
http://www.securityfocus.com/bid/105548
https://access.redhat.com/errata/RHSA-2018:2902
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8292