7.5
CVE-2019-0545
- EPSS 9.61%
- Veröffentlicht 08.01.2019 21:29:00
- Zuletzt bearbeitet 21.11.2024 04:16:49
- Erkennungen
An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ .Net Framework Version 2.0 Update sp2
Microsoft ≫ .Net Framework Version 3.0 Update sp2
Microsoft ≫ .Net Framework Version 3.5
Microsoft ≫ Windows 10 Version -
Microsoft ≫ Windows 10 Version 1607
Microsoft ≫ Windows 10 Version 1703
Microsoft ≫ Windows 10 Version 1709
Microsoft ≫ Windows 10 Version 1803
Microsoft ≫ Windows 10 Version 1809
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows Server 2016
Microsoft ≫ Windows Server 2019 Version -
Microsoft ≫ Windows 10 Version 1607
Microsoft ≫ Windows 10 Version 1703
Microsoft ≫ Windows 10 Version 1709
Microsoft ≫ Windows 10 Version 1803
Microsoft ≫ Windows 10 Version 1809
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows Server 2016
Microsoft ≫ Windows Server 2019 Version -
Microsoft ≫ .Net Framework Version 3.5.1
Microsoft ≫ Windows 7 Version - Update sp1
Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform itanium
Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform itanium
Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
Microsoft ≫ .Net Framework Version 4.5.2
Microsoft ≫ Windows 7 Version - Update sp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version - Update sp2
Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version - Update sp2
Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 4.6.2
Microsoft ≫ .Net Framework Version 4.7
Microsoft ≫ .Net Framework Version 4.7.1
Microsoft ≫ .Net Framework Version 4.7.2
Microsoft ≫ .Net Framework Version 4.6
Microsoft ≫ Windows 7 Version - Update sp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 4.6.1
Microsoft ≫ Windows 7 Version - Update sp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 4.6.2
Microsoft ≫ Windows 7 Version - Update sp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 4.7
Microsoft ≫ Windows 7 Version - Update sp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 4.7.1
Microsoft ≫ Windows 7 Version - Update sp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 4.7.2
Microsoft ≫ Windows 7 Version - Update sp1
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows 8.1
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Microsoft ≫ Windows Server 2012
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ .Net Framework Version 4.7.1
Microsoft ≫ .Net Framework Version 4.7.2
Microsoft ≫ .Net Framework Version 4.7.2
Microsoft ≫ .Net Framework Version 4.7
Microsoft ≫ .Net Framework Version 4.7.1
Microsoft ≫ .Net Framework Version 4.7.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 9.61% | 0.949 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www.securityfocus.com/bid/106405
https://access.redhat.com/errata/RHSA-2019:0040
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0545