{"id":"CVE-2019-0545","published":"2019-01-08T21:00:00Z","modified":"2024-08-04T17:51:26Z","title":"An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin…","vendor":"Microsoft","product":".NET Core","tier":"tail","description":{"text":"An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka \".NET Framework Information Disclosure Vulnerability.\" This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.09611,"percentile":0.95462,"provenance":"source"},"cwes":[],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0545","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/106405","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0040","tags":["vendor-advisory","x_refsource_REDHAT"]}],"priority":{"score":19.1,"factors":[{"name":"EPSS percentile","points":19.09}]},"vendorSlug":"microsoft","affectedVersions":[{"vendor":"Microsoft","product":".NET Core","versions":["2.1","2.2"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework","versions":["2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2","2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2","2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2","3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2","3.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2","3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2","3.5 on Windows 10 for 32-bit Systems","3.5 on Windows 10 for x64-based Systems","3.5 on Windows 10 Version 1607 for 32-bit Systems","3.5 on Windows 10 Version 1607 for x64-based Systems"]}],"affected":[{"ecosystem":"NuGet","package":"Microsoft.NETCore.App","vulnerableRanges":[">=2.1.0, <2.1.7",">=2.2.0, <2.2.1"],"patched":["2.1.7","2.2.1"],"from":["GHSA-2xjx-v99w-gqf3"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2071","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2020-1147","published":"2020-07-14","fixed":"2.1.20","kev":true},{"cve":"CVE-2021-1721","published":"2021-02-25","fixed":"2.1.25","kev":false},{"cve":"CVE-2021-34485","published":"2021-08-12","fixed":"2.1.29","kev":false},{"cve":"CVE-2019-0545","published":"2019-01-08","fixed":"2.2.1","kev":false},{"cve":"CVE-2019-0564","published":"2019-01-08","fixed":"2.2.1","kev":false},{"cve":"CVE-2019-0657","published":"2019-03-06","fixed":"2.2.2","kev":false,"link":{"from":"CVE-2019-0545","to":"CVE-2019-0657","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"NuGet:Microsoft.NETCore.App","fromFixed":"2.2.1","toFixed":"2.2.2","daysApart":57}]}}],"package":"NuGet:Microsoft.NETCore.App"}}