Lucene search
HistoryMar 05, 2019 - 11:29 p.m.
CVE-2019-0657
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
5.6
Confidence
High
EPSS
0.002
Percentile
59.1%
A vulnerability exists in certain .Net Framework APIâs and Visual Studio in the way they parse URLâs, aka â.NET Framework and Visual Studio Spoofing Vulnerabilityâ.
Affected configurations
Node
microsoft.net_coreMatch1.0
ORmicrosoft.net_coreMatch2.1
ORmicrosoft.net_coreMatch2.2
ORmicrosoftpowershell_coreMatch6.0
ORmicrosoftpowershell_coreMatch6.1
ORmicrosoftvisual_studio_2017Match-
ORmicrosoftvisual_studio_2017Match15.9
Node
microsoft.net_frameworkMatch2.0sp2
ORmicrosoft.net_frameworkMatch3.0sp2
microsoftwindows_server_2008Match-sp2
Node
microsoft.net_frameworkMatch3.5
microsoftwindows_10Match1607
ORmicrosoftwindows_10Match1703
ORmicrosoftwindows_10Match1709
ORmicrosoftwindows_10Match1803
ORmicrosoftwindows_10Match1809
ORmicrosoftwindows_8.1Match-
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
ORmicrosoftwindows_server_2016Match-
ORmicrosoftwindows_server_2016Match1709
ORmicrosoftwindows_server_2016Match1803
ORmicrosoftwindows_server_2019Match-
Node
microsoft.net_frameworkMatch3.5.1
microsoftwindows_7Match-sp1
ORmicrosoftwindows_server_2008Matchr2sp1itanium
ORmicrosoftwindows_server_2008Matchr2sp1x64
Node
microsoft.net_frameworkMatch4.5.2
microsoftwindows_7Match-sp1
ORmicrosoftwindows_8.1Match-
ORmicrosoftwindows_rt_8.1Match-
ORmicrosoftwindows_server_2008Match-sp1x64
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
Node
microsoft.net_frameworkMatch4.6
microsoftwindows_server_2008Match-sp2
Node
microsoft.net_frameworkMatch4.6.2
ORmicrosoft.net_frameworkMatch4.7
ORmicrosoft.net_frameworkMatch4.7.1
ORmicrosoft.net_frameworkMatch4.7.2
microsoftwindows_10Match1607
ORmicrosoftwindows_server_2016Match-
Node
microsoft.net_frameworkMatch4.6
ORmicrosoft.net_frameworkMatch4.6.1
ORmicrosoft.net_frameworkMatch4.6.2
microsoftwindows_10Match-
Node
microsoft.net_frameworkMatch4.6
ORmicrosoft.net_frameworkMatch4.6.1
ORmicrosoft.net_frameworkMatch4.6.2
ORmicrosoft.net_frameworkMatch4.7
ORmicrosoft.net_frameworkMatch4.7.1
ORmicrosoft.net_frameworkMatch4.7.2
microsoftwindows_7Match-sp1
ORmicrosoftwindows_8.1Match-
ORmicrosoftwindows_rt_8.1Match-
ORmicrosoftwindows_server_2008Match-sp1x64
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
Node
microsoft.net_frameworkMatch4.7.1
ORmicrosoft.net_frameworkMatch4.7.2
microsoftwindows_10Match1709
ORmicrosoftwindows_server_2016Match1709
Node
microsoft.net_frameworkMatch4.7.2
microsoftwindows_10Match1803
ORmicrosoftwindows_10Match1809
ORmicrosoftwindows_server_2016Match1803
ORmicrosoftwindows_server_2019Match-
Node
microsoft.net_frameworkMatch4.7
ORmicrosoft.net_frameworkMatch4.7.1
ORmicrosoft.net_frameworkMatch4.7.2
microsoftwindows_10Match1703
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | .net_core | 1.0 | cpe:2.3:a:microsoft:.net_core:1.0:*:*:*:*:*:*:* |
| microsoft | .net_core | 2.1 | cpe:2.3:a:microsoft:.net_core:2.1:*:*:*:*:*:*:* |
| microsoft | .net_core | 2.2 | cpe:2.3:a:microsoft:.net_core:2.2:*:*:*:*:*:*:* |
| microsoft | powershell_core | 6.0 | cpe:2.3:a:microsoft:powershell_core:6.0:*:*:*:*:*:*:* |
| microsoft | powershell_core | 6.1 | cpe:2.3:a:microsoft:powershell_core:6.1:*:*:*:*:*:*:* |
| microsoft | visual_studio_2017 | - | cpe:2.3:a:microsoft:visual_studio_2017:-:*:*:*:*:*:*:* |
| microsoft | visual_studio_2017 | 15.9 | cpe:2.3:a:microsoft:visual_studio_2017:15.9:*:*:*:*:*:*:* |
| microsoft | .net_framework | 2.0 | cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:* |
| microsoft | .net_framework | 3.0 | cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:* |
| microsoft | windows_server_2008 | - | cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* |
Related
redhat
redhat
openvas
openvas
.NET Core Domain Spoofing Vulnerability (Feb 2019)
2019-02-26 00:00:00
.NET Core SDK Spoofing Vulnerability (Feb 2019)
2019-02-14 00:00:00
.NET Core Spoofing Vulnerability (Feb 2019)
2019-02-14 00:00:00
prion
prion
Spoofing
2019-03-05 23:29:00
altlinux
altlinux
cvelist
cvelist
CVE-2019-0657
2019-03-06 00:00:00
symantec
symantec
nessus
nessus
Security Update for .NET Core (February 2019)
2019-02-13 00:00:00
RHEL 7 : dotNET (RHSA-2019:0349)
2019-02-20 00:00:00
Security Updates for Microsoft Visual Studio Products (February 2019)
2019-02-12 00:00:00
cve
cve
CVE-2019-0657
2019-03-06 00:00:00
github
github
Improper Input Validation in .Net Framework API's
2022-05-14 01:28:01
redhatcve
redhatcve
CVE-2019-0657
2019-02-13 13:19:35
osv
osv
CVE-2019-0657
2019-03-05 23:29:02
Improper Input Validation in .Net Framework API's
2022-05-14 01:28:01
veracode
veracode
Authorization Bypass
2019-02-14 06:01:10
mscve
mscve
.NET Framework and Visual Studio Spoofing Vulnerability
2019-02-12 08:00:00
mskb
mskb
Description of the Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 8.1, RT 8.1, and Server 2012 R2 (KB 4483450)
2019-02-12 08:00:00
kaspersky
kaspersky
KLA11419 Multiple vulnerabilities in Microsoft Developer Tools
2019-02-12 00:00:00
talosblog
talosblog
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
5.6
Confidence
High
EPSS
0.002
Percentile
59.1%
Related for NVD:CVE-2019-0657