.NET and Visual Studio Information Disclosure Vulnerability
Weakness
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| .net | Microsoft | 8.0.0 (including) | 8.0.8 (excluding) |
| Visual_studio_2022 | Microsoft | 17.6.0 (including) | 17.6.18 (excluding) |
| Visual_studio_2022 | Microsoft | 17.8.0 (including) | 17.8.13 (excluding) |
| Visual_studio_2022 | Microsoft | 17.10.0 (including) | 17.10.6 (excluding) |
| Red Hat Enterprise Linux 8 | RedHat | dotnet8.0-0:8.0.108-1.el8_10 | * |
| Red Hat Enterprise Linux 9 | RedHat | dotnet8.0-0:8.0.108-1.el9_4 | * |
| Dotnet7 | Ubuntu | jammy | * |
| Dotnet8 | Ubuntu | devel | * |
| Dotnet8 | Ubuntu | jammy | * |
| Dotnet8 | Ubuntu | noble | * |
| Dotnet8 | Ubuntu | upstream | * |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/102.html
- https://cwe.mitre.org/data/definitions/117.html
- https://cwe.mitre.org/data/definitions/383.html
- https://cwe.mitre.org/data/definitions/477.html
- https://cwe.mitre.org/data/definitions/65.html