.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-457 advisory.

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-36049)

  - ASP.NET Core - Security Feature Bypass Vulnerability (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:7256 advisory.

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-36049)

  - ASP.NET Core - Security Feature Bypass Vulnerability (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:7258 advisory.

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-36049)

  - ASP.NET Core - Security Feature Bypass Vulnerability (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7253 advisory.

  - ASP.NET Core - Security Feature Bypass Vulnerability (CVE-2023-36558)

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-36049)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7255 advisory.

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-36049)

  - ASP.NET Core - Security Feature Bypass Vulnerability (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7257 advisory.

  - ASP.NET Core - Security Feature Bypass Vulnerability (CVE-2023-36558)

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-36049)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7258 advisory.

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-36049)

  - ASP.NET Core - Security Feature Bypass Vulnerability (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7256 advisory.

  - ASP.NET Core - Security Feature Bypass Vulnerability (CVE-2023-36558)

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-36049)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Microsoft .NET Core SDK installed on the remote host is 6.0.x prior to 6.0.125, 6.0.x prior to 6.0.320, 6.0.x prior to 6.0.417, 7.0.x prior to 7.0.114, 7.0.x prior to 7.0.311, 7.0.x prior to 7.0.404, or 8.0.x to 8.0.100. It is, therefore, affected by multiple vulnerabilities, as follows:

  - An elevation of privilege vulnerability exists in .NET where untrusted URIs provided to   System.Net.WebRequest.Create can be used to inject arbitrary commands to backend FTP servers.
  (CVE-2023-36049)   
  - A security feature bypass vulnerability exists in ASP.NET where an unauthenticated user is able to bypass   validation on Blazor server forms which could trigger unintended actions.(CVE-2023-36558)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:7253 advisory.

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-36049)

  - ASP.NET Core - Security Feature Bypass Vulnerability (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:7255 advisory.

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-36049)

  - ASP.NET Core - Security Feature Bypass Vulnerability (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:7257 advisory.

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-36049)

  - ASP.NET Core - Security Feature Bypass Vulnerability (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows:

  - Security feature bypass in ASP.NET. An attacker can bypass the security checks that prevents an attacker     from accessing internal applications in a website. (CVE-2023-36560)

  - Privilege escalation vulnerability in FTP component of .NET Framework. An attacker can inject arbitrary     commands to the FTP server. (CVE-2023-36049)

  - Information disclosure vulnerability in .NET Framework. An attacker can obtain the ObjRef URI which could     lead to remote code execution. (CVE-2024-29059

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7253 advisory.

  - dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

  - dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7256 advisory.

  - dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

  - dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7254 advisory.

  - dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

  - dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7255 advisory.

  - dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

  - dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7258 advisory.

  - dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

  - dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7259 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.125 and .NET Runtime 6.0.25.

    The following packages have been upgraded to a later upstream version: rh-dotnet60-dotnet (6.0.125).
    (BZ#2247677)

    Security Fix(es):

    * dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

    * dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7257 advisory.

  - dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

  - dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6480-1 advisory.

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-36049)

  - ASP.NET Core - Security Feature Bypass Vulnerability (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising the integrity of the system/application. (CVE-2023-36558)

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. (CVE-2023-36049)

  - A denial of service (DoS) vulnerability. An attacker can exploit this issue to cause the affected component to     deny system or application services. (CVE-2023-36038, CVE-2023-36042)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
186982	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-457)	Nessus	Amazon Linux Local Security Checks	critical
186402	Rocky Linux 8 : dotnet7.0 (RLSA-2023:7256)	Nessus	Rocky Linux Local Security Checks	critical
186398	Rocky Linux 8 : dotnet6.0 (RLSA-2023:7258)	Nessus	Rocky Linux Local Security Checks	critical
186393	Oracle Linux 9 : dotnet8.0 (ELSA-2023-7253)	Nessus	Oracle Linux Local Security Checks	critical
186356	Oracle Linux 9 : dotnet7.0 (ELSA-2023-7255)	Nessus	Oracle Linux Local Security Checks	critical
186355	Oracle Linux 9 : dotnet6.0 (ELSA-2023-7257)	Nessus	Oracle Linux Local Security Checks	critical
186242	Oracle Linux 8 : dotnet6.0 (ELSA-2023-7258)	Nessus	Oracle Linux Local Security Checks	critical
186196	Oracle Linux 8 : dotnet7.0 (ELSA-2023-7256)	Nessus	Oracle Linux Local Security Checks	critical
185958	Security Update for .NET Core SDK (November 2023)	Nessus	Windows	critical
185909	AlmaLinux 9 : dotnet8.0 (ALSA-2023:7253)	Nessus	Alma Linux Local Security Checks	critical
185908	AlmaLinux 9 : dotnet7.0 (ALSA-2023:7255)	Nessus	Alma Linux Local Security Checks	critical
185907	AlmaLinux 9 : dotnet6.0 (ALSA-2023:7257)	Nessus	Alma Linux Local Security Checks	critical
185887	Security Updates for Microsoft .NET Framework (November 2023)	Nessus	Windows : Microsoft Bulletins	critical
185808	RHEL 9 : dotnet8.0 (RHSA-2023:7253)	Nessus	Red Hat Local Security Checks	critical
185807	RHEL 8 : dotnet7.0 (RHSA-2023:7256)	Nessus	Red Hat Local Security Checks	critical
185803	RHEL 8 : dotnet8.0 (RHSA-2023:7254)	Nessus	Red Hat Local Security Checks	critical
185802	RHEL 9 : dotnet7.0 (RHSA-2023:7255)	Nessus	Red Hat Local Security Checks	critical
185799	RHEL 8 : dotnet6.0 (RHSA-2023:7258)	Nessus	Red Hat Local Security Checks	critical
185796	RHEL 7 : .NET 6.0 (RHSA-2023:7259)	Nessus	Red Hat Local Security Checks	critical
185794	RHEL 9 : dotnet6.0 (RHSA-2023:7257)	Nessus	Red Hat Local Security Checks	critical
185778	Ubuntu 22.04 LTS / 23.04 / 23.10 : .NET vulnerabilities (USN-6480-1)	Nessus	Ubuntu Local Security Checks	critical
185735	Security Updates for Microsoft Visual Studio Products (November 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-36049

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical