Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mscveMicrosoftMS:CVE-2018-8356
HistoryJul 10, 2018 - 7:00 a.m.

.NET Framework Security Feature Bypass Vulnerability

2018-07-1007:00:00
Microsoft
msrc.microsoft.com
11

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

59.3%

JSON

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates.

An attacker could present expired certificates when challenged.

The security update addresses the vulnerability by ensuring that .NET Framework components correctly validate certificates.

Related

android 1
cvelist 2
cve 2
prion 2
nvd 2
github 1
redhatcve 1
veracode 1
symantec 1
openvas 14
osv 2
nessus 10
mskb 38
kaspersky 1
talosblog 1
trendmicroblog 1
android
android
CVE-2018-9356
2018-06-01 00:00:00
cvelist
cvelist
CVE-2018-9356
2018-10-31 00:00:00
CVE-2018-8356
2018-07-11 00:00:00
cve
cve
CVE-2018-9356
2018-11-06 17:29:00
CVE-2018-8356
2018-07-11 00:29:02
prion
prion
Double free
2018-11-06 17:29:00
Security feature bypass
2018-07-11 00:29:00
nvd
nvd
CVE-2018-9356
2018-11-06 17:29:00
CVE-2018-8356
2018-07-11 00:29:02
github
github
Improper Certificate Validation in Microsoft .NET Framework components
2022-05-14 03:00:10
redhatcve
redhatcve
CVE-2018-8356
2018-07-12 01:19:12
veracode
veracode
Certificate Validation Bypass
2018-07-11 07:34:23
symantec
symantec
Microsoft .NET Framework CVE-2018-8356 Security Bypass Vulnerability
2018-07-10 00:00:00
openvas
openvas
Microsoft PowerShell Core Security Feature Bypass Vulnerability (Jul 2018) - Mac OS X
2018-07-20 00:00:00
Microsoft PowerShell Core Security Feature Bypass Vulnerability (Jul 2018) - Linux
2018-07-20 00:00:00
Microsoft PowerShell Core Security Feature Bypass Vulnerability (Jul 2018) - Windows
2018-07-20 00:00:00
osv
osv
Improper Certificate Validation in Microsoft .NET Framework components
2022-05-14 03:00:10
CVE-2018-8356
2018-07-11 00:29:02
nessus
nessus
Security Updates for Microsoft .NET core and ASP.NET (DoS) (July 2018)
2018-07-13 00:00:00
Security Updates for Microsoft .NET Framework (July 2018) (deprecated)
2018-07-10 00:00:00
KB4338820: Windows Server 2012 July 2018 Security Update
2018-07-10 00:00:00
mskb
mskb
Security update 2018-07-10
2018-07-10 07:00:00
Description of the Security Only update for .NET Framework 3.5 for Windows Server 2012 (KB 4338610)
2018-07-10 07:00:00
Security and Quality Rollup updates for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4340556)
2018-09-12 00:00:00
kaspersky
kaspersky
KLA11288 Multiple vulnerabilities in Microsoft Development Tools
2018-07-10 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday - July 2018
2018-07-10 10:36:00
trendmicroblog
trendmicroblog
Zero-Day Coverage Update – Week of July 9, 2018
2018-07-13 14:10:20

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

59.3%

JSON
Related for MS:CVE-2018-8356
android1cvelist2cve2prion2nvd2github1redhatcve1veracode1symantec1openvas14osv2nessus10mskb38kaspersky1talosblog1trendmicroblog1