CVE-2018-8292

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
microsoftCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
microsoftasp.net_core
1.0
microsoftasp.net_core
1.1
microsoftasp.net_core
2.1
microsoftpowershell_core
6.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
microsoftpowershell
6.0
CNA
microsoftpowershell
1.0
CNA
microsoftpowershell
1.1
CNA
microsoftpowershell
2.1
CNA
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mono
bionic
not-affected
trusty
not-affected
xenial
not-affected