CVE-2018-8292
published 2018-10-10CVE-2018-8292: An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information…
high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | asp.net_core | — | — |
| microsoft | asp.net_core | — | — |
| microsoft | asp.net_core | — | — |
| microsoft | net_core | — | — |
| microsoft | net_core | — | — |
| microsoft | net_core | — | — |
| microsoft | powershell_core | — | — |
| microsoft | system.net.http | >= 0 < 4.3.4 | 4.3.4 |
| msrc | net_core_1.0 | — | — |
| msrc | net_core_1.1 | — | — |
| msrc | net_core_2.1 | — | — |
| msrc | powershell_core_6.0 | — | — |