7.5
CVE-2019-0545
- EPSS 6.74%
- Published 08.01.2019 21:29:00
- Last modified 21.11.2024 04:16:49
- Source secure@microsoft.com
- Teams watchlist Login
- Open Login
An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2.
Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ .Net Framework Version2.0 Updatesp2
Microsoft ≫ .Net Framework Version3.0 Updatesp2
Microsoft ≫ .Net Framework Version3.5
Microsoft ≫ Windows 10 Version-
Microsoft ≫ Windows 10 Version1607
Microsoft ≫ Windows 10 Version1703
Microsoft ≫ Windows 10 Version1709
Microsoft ≫ Windows 10 Version1803
Microsoft ≫ Windows 10 Version1809
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ Windows Server 2016
Microsoft ≫ Windows Server 2019 Version-
Microsoft ≫ Windows 10 Version1607
Microsoft ≫ Windows 10 Version1703
Microsoft ≫ Windows 10 Version1709
Microsoft ≫ Windows 10 Version1803
Microsoft ≫ Windows 10 Version1809
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ Windows Server 2016
Microsoft ≫ Windows Server 2019 Version-
Microsoft ≫ .Net Framework Version3.5.1
Microsoft ≫ Windows 7 Version- Updatesp1
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformitanium
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformitanium
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
Microsoft ≫ .Net Framework Version4.5.2
Microsoft ≫ Windows 7 Version- Updatesp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Version- Updatesp2
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Version- Updatesp2
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.6.2
Microsoft ≫ .Net Framework Version4.7
Microsoft ≫ .Net Framework Version4.7.1
Microsoft ≫ .Net Framework Version4.7.2
Microsoft ≫ .Net Framework Version4.6
Microsoft ≫ Windows 7 Version- Updatesp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.6.1
Microsoft ≫ Windows 7 Version- Updatesp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.6.2
Microsoft ≫ Windows 7 Version- Updatesp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.7
Microsoft ≫ Windows 7 Version- Updatesp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.7.1
Microsoft ≫ Windows 7 Version- Updatesp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.7.2
Microsoft ≫ Windows 7 Version- Updatesp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version-
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ .Net Framework Version4.7.1
Microsoft ≫ .Net Framework Version4.7.2
Microsoft ≫ .Net Framework Version4.7.2
Microsoft ≫ .Net Framework Version4.7
Microsoft ≫ .Net Framework Version4.7.1
Microsoft ≫ .Net Framework Version4.7.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 6.74% | 0.909 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.