cbcvebase.
CVE-2018-8356
published 2018-07-11

CVE-2018-8356: A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security…

medium5.5CVSS 3.0
AVLACLPRLUINSUCNIHAN
A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 1.0, .NET Core 2.0, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.

Affected

101 ranges· showing 25
VendorProductVersion rangeFixed in
microsoftasp.net_core
microsoftasp.net_core
microsoftasp.net_core
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework
microsoftmicrosoft_net_framework