Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2023-24936
HistoryJun 14, 2023 - 5:49 a.m.

CVE-2023-24936

2023-06-1405:49:02
redhat.com
access.redhat.com
15
dotnet
xml deserialization
bypass restrictions
cve-2023-24936

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

58.5%

JSON

A flaw was found in dotnet. This issue can allow bypass restrictions when deserializing a DataSet or DataTable from XML.

Related

prion 1
osv 12
veracode 1
cvelist 1
nvd 1
vulnrichment 1
ubuntucve 1
github 1
mscve 1
alpinelinux 1
cve 1
ibm 1
redhat 5
oraclelinux 4
rocky 2
nessus 15
almalinux 4
openvas 6
ubuntu 2
mskb 20
ics 2
kaspersky 1
rapid7blog 1
prion
prion
Privilege escalation
2023-06-14 15:15:00
osv
osv
BIT-dotnet-sdk-2023-24936
2024-03-06 10:56:24
CVE-2023-24936
2023-06-14 15:15:09
BIT-dotnet-2023-24936
2024-03-06 10:56:15
veracode
veracode
Privilege Escalation
2023-06-15 18:24:40
cvelist
cvelist
CVE-2023-24936 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
2023-06-14 14:52:19
nvd
nvd
CVE-2023-24936
2023-06-14 15:15:09
vulnrichment
vulnrichment
CVE-2023-24936 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
2023-06-14 14:52:19
ubuntucve
ubuntucve
CVE-2023-24936
2023-06-13 00:00:00
github
github
.NET Elevation of Privilege Vulnerability
2023-06-14 17:04:29
mscve
mscve
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
2023-06-13 07:00:00
alpinelinux
alpinelinux
CVE-2023-24936
2023-06-14 15:15:09
cve
cve
CVE-2023-24936
2023-06-14 15:15:09
ibm
ibm
Security Bulletin: Multiple security vulnerabilities in .NET may affect IBM Robotic Process Automation for Cloud Pak (CVE-2023-24936, CVE-2023-29337, CVE-2023-33128)
2023-08-22 03:25:09
redhat
redhat
(RHSA-2023:3580) Important: .NET 6.0 security, bug fix, and enhancement update
2023-06-14 08:26:44
(RHSA-2023:3582) Important: .NET 6.0 security, bug fix, and enhancement update
2023-06-14 07:34:06
(RHSA-2023:3581) Important: .NET 6.0 security, bug fix, and enhancement update
2023-06-14 07:26:00
oraclelinux
oraclelinux
.NET 6.0 security, bug fix, and enhancement update
2023-06-15 00:00:00
.NET 6.0 security, bug fix, and enhancement update
2023-06-16 00:00:00
.NET 7.0 security, bug fix, and enhancement update
2023-06-17 00:00:00
rocky
rocky
.NET 6.0 security, bug fix, and enhancement update
2023-08-31 16:54:34
.NET 7.0 security, bug fix, and enhancement update
2023-08-31 16:54:34
nessus
nessus
RHEL 9 : .NET 6.0 (RHSA-2023:3581)
2023-06-14 00:00:00
RHEL 7 : .NET 6.0 (RHSA-2023:3580)
2023-06-14 00:00:00
Oracle Linux 8 : .NET / 6.0 (ELSA-2023-3582)
2023-06-16 00:00:00
almalinux
almalinux
Important: .NET 6.0 security, bug fix, and enhancement update
2023-06-14 00:00:00
Important: .NET 6.0 security, bug fix, and enhancement update
2023-06-14 00:00:00
Important: .NET 7.0 security, bug fix, and enhancement update
2023-06-14 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6161-2)
2023-06-26 00:00:00
Ubuntu: Security Advisory (USN-6161-1)
2023-06-14 00:00:00
Microsoft .NET Framework Multiple Vulnerabilities (KB5027537)
2023-06-14 00:00:00
ubuntu
ubuntu
.NET regression
2023-06-23 00:00:00
.NET vulnerabilities
2023-06-13 00:00:00
mskb
mskb
June 13, 2023-KB5027123 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016
2023-06-13 07:00:00
June 13, 2023-Security Only Update for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 8 Standard and Windows Server 2012 (KB5027532)
2023-06-13 07:00:00
June 13, 2023-KB5027539 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11, version 21H2
2023-06-13 07:00:00
ics
ics
Siemens PNI
2023-11-16 12:00:00
Siemens ST7 ScadaConnect
2024-06-13 12:00:00
kaspersky
kaspersky
KLA50317 Multiple vulnerabilities in Microsoft Developer Tools
2023-06-13 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - June 2023
2023-06-13 20:49:27

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

58.5%

JSON
Related for RH:CVE-2023-24936
prion1osv12veracode1cvelist1nvd1vulnrichment1ubuntucve1github1mscve1alpinelinux1cve1ibm1redhat5oraclelinux4rocky2nessus15almalinux4openvas6ubuntu2mskb20ics2kaspersky1rapid7blog1