Unauthorized access to screen In system.security.cryptography.xml
Description
Duplicate Advisory: .NET Information Disclosure Vulnerability
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-vh55-786g-wjwj. This link is maintained to preserve external references.
Original Description
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core 3.1 and .NET 6.0. An information disclosure vulnerability exists in .NET Core 3.1 and .NET 6.0 that could lead to unauthorized access of privileged information.
Affected software
Any .NET 6.0 application running on .NET 6.0.7 or earlier.
Any .NET Core 3.1 applicaiton running on .NET Core 3.1.27 or earlier.
Patches
If you're using .NET 6.0, you should download and install Runtime 6.0.8 or SDK 6.0.108 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.
If you're using .NET Core 3.1, you should download and install Runtime 3.1.28 (for Visual Studio 2019 v16.9) from https://dotnet.microsoft.com/download/dotnet-core/3.1.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 nuget | 4.7.1, 6.0.1 | ||
nuget | 3.1.28, 6.0.8 | ||
nuget | 3.1.28, 6.0.8 | ||
nuget | 3.1.28, 6.0.8 | ||
nuget | 3.1.28, 6.0.8 | ||
nuget | 3.1.28, 6.0.8 | ||
nuget | 3.1.28, 6.0.8 | ||
nuget | 3.1.28, 6.0.8 | ||
nuget | 3.1.28, 6.0.8 | ||
nuget | 3.1.28, 6.0.8 |
1-10 of 12
10
Aliases
References