Lucene search
HistoryNov 14, 2023 - 10:15 p.m.
CVE-2023-36558
asp.net core
security feature bypass
vulnerability
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
17.8%
ASP.NET Core - Security Feature Bypass Vulnerability
Affected configurations
Node
microsoft.netRange6.0.0–6.0.25
ORmicrosoft.netRange7.0.0–7.0.14
ORmicrosoft.netMatch8.0.0rc1
ORmicrosoft.netMatch8.0.0rc2
ORmicrosoftasp.net_coreRange6.0.0–6.0.25
ORmicrosoftasp.net_coreRange7.0.0–7.0.14
ORmicrosoftasp.net_coreMatch8.0.0-
ORmicrosoftvisual_studio_2022Range17.2–17.2.22
ORmicrosoftvisual_studio_2022Range17.4–17.4.14
ORmicrosoftvisual_studio_2022Range17.6–17.6.10
ORmicrosoftvisual_studio_2022Range17.7–17.7.7
Related
osv
osv
Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
2023-11-14 20:36:55
BIT-aspnet-core-2023-36558
2024-03-06 10:51:21
BIT-dotnet-sdk-2023-36558
2024-03-06 10:53:50
nessus
nessus
Security Update for Microsoft ASP.NET Core (November 2023) (CVE-2023-36558)
2023-11-16 00:00:00
Security Update for Microsoft .NET Core (November 2023) (CVE-2023-36558)
2023-11-16 00:00:00
Rocky Linux 8 : dotnet6.0 (RLSA-2023:7258)
2023-11-28 00:00:00
github
github
cve
cve
CVE-2023-36558
2023-11-14 22:15:29
redos
redos
ROS-20240329-04
2024-03-29 00:00:00
ubuntucve
ubuntucve
CVE-2023-36558
2023-11-14 00:00:00
veracode
veracode
Security Bypass
2023-11-15 09:57:15
prion
prion
Security feature bypass
2023-11-14 22:15:00
mscve
mscve
ASP.NET Core - Security Feature Bypass Vulnerability
2023-11-14 08:00:00
redhatcve
redhatcve
CVE-2023-36558
2023-11-15 14:13:05
alpinelinux
alpinelinux
CVE-2023-36558
2023-11-14 22:15:29
cvelist
cvelist
CVE-2023-36558 ASP.NET Core - Security Feature Bypass Vulnerability
2023-11-14 21:35:31
vulnrichment
vulnrichment
CVE-2023-36558 ASP.NET Core - Security Feature Bypass Vulnerability
2023-11-14 21:35:31
oraclelinux
oraclelinux
dotnet8.0 security update
2023-11-28 00:00:00
dotnet7.0 security update
2023-11-27 00:00:00
dotnet6.0 security update
2023-11-24 00:00:00
ubuntu
ubuntu
.NET vulnerabilities
2023-11-15 00:00:00
almalinux
almalinux
Moderate: dotnet6.0 security update
2023-11-15 00:00:00
Moderate: dotnet8.0 security update
2023-11-15 00:00:00
Moderate: dotnet8.0 security update
2023-11-15 00:00:00
rocky
rocky
dotnet6.0 security update
2023-11-28 22:43:36
dotnet7.0 security update
2023-11-28 22:43:36
redhat
redhat
(RHSA-2023:7254) Moderate: dotnet8.0 security update
2023-11-15 17:21:26
(RHSA-2023:7253) Moderate: dotnet8.0 security update
2023-11-15 17:19:53
mskb
mskb
.NET 6.0 Update - November 14, 2023 (KB5032883)
2023-11-14 08:00:00
.NET 7.0 Update - November 14, 2023 (KB5032884)
2023-11-14 08:00:00
openvas
openvas
.NET Core Multiple Vulnerabilities - Windows
2023-11-16 00:00:00
Ubuntu: Security Advisory (USN-6480-1)
2023-11-16 00:00:00
Microsoft .NET Framework Multiple Vulnerabilities (KB5032337)
2023-11-15 00:00:00
kaspersky
kaspersky
KLA61979 Multiple vulnerabilities in Microsoft Developer Tools
2023-11-14 00:00:00
ibm
ibm
ics
ics
Siemens ST7 ScadaConnect
2024-06-13 12:00:00
rapid7blog
rapid7blog
Patch Tuesday - November 2023
2023-11-14 21:27:09
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
17.8%
Related for NVD:CVE-2023-36558