Security Bulletin: Vulnerability of System.Text.Encodings.Web.4.5.0 .dll has afftected to .NET Agent

Summary

.NET Agent is vulnerable to System.Text.Encodings.Web.4.5.0 .dll . [CVE-2021-26701] This fix includes System.Text.Encodings.Web.7.0.0 upgraded to System.Text.Encodings.Web.4.5.0 .dll.

Vulnerability Details

CVEID:CVE-2021-26701
**DESCRIPTION:**Microsoft .NET Core and Visual Studio could allow a remote attacker to execute arbitrary code on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system with elevated privileges.
CVSS Base score: 8.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/196358 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

Remediation/Fixes

.NET Agent release 8.1.4.0.20 (.NET Agent Version: 08.23.05.00)

Download the APM Advanced Agents installer from Passport Advantage. Please refer below link for download instructions:

<https://www.ibm.com/docs/en/capmp/8.1.4?topic=advantage-part-numbers&gt;

Part Number : M0CLJML

Build Name : adv_agents_win_8.1.4.0.20.zip

Workarounds and Mitigations

None