CVE-2024-38167

CWE-319 — Cleartext TransmissionCWE-200 — Information Exposure8 documents7 sources
Severity
6.5MEDIUM
EPSS
2.0%
top 16.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Microsoft .net 8.0Microsoft Microsoft Visual Studio 2022 Version 17.10Microsoft Microsoft Visual Studio 2022 Version 17.6+3 more
Timeline
PublishedAug 13

Description

.NET and Visual Studio Information Disclosure Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages19 packages

▶NVDmicrosoft/visual_studio_202217.6.0 — 17.6.18+2
▶NVDmicrosoft/.net8.0.0 — 8.0.8

Patches

Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

4
CVEList
.NET and Visual Studio Information Disclosure Vulnerability↗2024-08-13
▶
OSV
CVE-2024-38167↗2024-08-13
▶
GHSA
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability↗2024-08-13
▶
OSV
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability↗2024-08-13
▶

📋Vendor Advisories

3
Red Hat
dotnet8.0: Information disclosure vulnerability in TlsStream↗2024-08-13
▶
Ubuntu
.NET vulnerability↗2024-08-13
▶
Microsoft
.NET and Visual Studio Information Disclosure Vulnerability↗2024-08-13
▶
CVE-2024-38167 (MEDIUM CVSS 6.5) | .NET and Visual Studio Information | cvebase.io