QwikSec

Security Database

CVE

CWE

Training

CVE-2022-41064

Published: Nov 9, 2022

Modified: Jan 2, 2025

PUBLISHED

CVSS v3.1

5.8

MEDIUM

Description

.NET Framework Information Disclosure Vulnerability

Vendor	Product	Versions
Microsoft	Nuget 2.1.2	affected `1.0.0 - < 2.1.2`
Microsoft	Nuget 4.8.5	affected `1.0.0 - < 4.8.4`
Microsoft	Microsoft .NET Framework 4.8	affected `4.8.0 - < 4.8.04584.08`
Microsoft	Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2	affected `3.0.0.0 - < 10.0.14393.5501`
Microsoft	Microsoft .NET Framework 4.7.2	affected `10.0.0.0 - < 10.0.04005.02`
Microsoft	Microsoft .NET Framework 4.8.1	affected `4.8.0.0 - < 4.8.09110.07`
Microsoft	Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2	affected `4.7.0 - < 4.7.04005.02`
Microsoft	Microsoft .NET Framework 4.6.2	affected `4.7.0 - < 4.7.04005.02`
Microsoft	Microsoft .NET Framework 4.6/4.6.2	affected `10.0.0.0 - < 10.0.10240.19567`

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

References

.NET Framework Information Disclosure Vulnerability

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.