ASP.NET Elevation of Privilege Vulnerability
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Msft | — | Apply update KB5028946 for Microsoft .NET Framework 3.5\4.8.1Apply update KB5028954 for Microsoft .NET Framework 3.5\4.8Apply update KB5028948 for Microsoft .NET Framework 3.5\4.8.1Apply update KB5029259 for Microsoft .NET Framework 3.5\4.6.22023-08 Security Only Update for .NET Framework 4.6.2 for Windows Server 2008 SP2 (KB5028978)Apply update KB5028951 for Microsoft .NET Framework 3.5\4.82023-08 Security Only Update for .NET Framework 4.8 for Windows Server 2012 R2 for x64 (KB5028974)2023-08 Security Only Update for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 for x64 (KB5028976)2023-08 Security Only Update for .NET Framework 4.8 for Windows Server 2012 for x64 (KB5028973)2023-08 Security Only Update for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2008 R2 for x64 (KB5028978)Apply update KB5028947 for Microsoft .NET Framework 3.5\4.8.1Apply update KB5028952 for Microsoft .NET Framework 4.8Apply update KB5028960 for Microsoft .NET Framework 3.5\4.7.22023-08 Security Only Update for .NET Framework 2.0, 3.0 for Windows Server 2008 SP2 (KB5028980)Apply update KB5028956 for Microsoft .NET Framework 3.5\4.82023-08 Security Only Update for .NET Framework 4.8 for Windows Server 2008 R2 for x64 (KB5028975)2023-08 Security Only Update for .NET Framework 4.6.2 for Windows Server 2008 SP2 for x64 (KB5028978)Apply update KB5028953 for Microsoft .NET Framework 3.5\4.8Apply update KB5028950 for Microsoft .NET Framework 3.5\4.8.1Apply update KB5029242 for Microsoft .NET Framework 3.5\4.6.2\4.7\4.7.1\4.7.22023-08 Security Only Update for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 for x64 (KB5028977)2023-08 Security Only Update for .NET Framework 2.0, 3.0 for Windows Server 2008 SP2 for x64 (KB5028980) | Aug 8, 2023 | Aug 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub