Fluid Attacks Database

Description

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel9	dotnet9.0	<0:9.0.121-1.el9_8	0:9.0.121-1.el9_8
rpm rhel10	dotnet9.0	<0:9.0.121-1.el10_2	0:9.0.121-1.el10_2
rpm rhel9	dotnet10.0	<0:10.0.112-1.el9_8	0:10.0.112-1.el9_8
rpm rhel8	dotnet9.0	<0:9.0.121-1.el8_10	0:9.0.121-1.el8_10
rpm rhel10	dotnet10.0	<0:10.0.112-1.el10_2	0:10.0.112-1.el10_2
rpm rhel8	dotnet10.0	<0:10.0.112-1.el8_10	0:10.0.112-1.el8_10

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.