Weak authentication in ASP.NET Core &amp; Visual Studio allows an unauthorized attacker to elevate privileges over a network.

vendor_unpatched cve-2025-24070: Unpatched CVEs for Ubuntu Linux (cve-2025-24070)

microsoft_dotnet 2025_Mar_11: dotnet

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-912 advisory.

    Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate     privileges over a network. (CVE-2025-24070)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2666 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es):

    * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method     (CVE-2025-24070)

    Bug Fix(es) and Enhancement(s):

    * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2670 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es):

    * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method     (CVE-2025-24070)

    Bug Fix(es) and Enhancement(s):

    * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2667 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 9.0.104 and .NET Runtime 9.0.3.Security Fix(es):

    * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method     (CVE-2025-24070)

    Bug Fix(es) and Enhancement(s):

    * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2668 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 9.0.104 and .NET Runtime 9.0.3.Security Fix(es):

    * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method     (CVE-2025-24070)

    Bug Fix(es) and Enhancement(s):

    * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2669 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es):

    * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method     (CVE-2025-24070)

    Bug Fix(es) and Enhancement(s):

    * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including:

  - An undisclosed ASP.NET Core and xVisual Studio Elevation of Privilege Vulnerability (CVE-2025-24070)

  - An undisclosed Visual Studio Elevation of Privilege Vulnerability (CVE-2025-24998)

  - An undisclosed Visual Studio Elevation of Privilege Vulnerability (CVE-2025-25003)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2667 advisory.

    [9.0.104-1.0.1]
    - Add support for Oracle Linux

    [9.0.104-1]
    - Update to .NET SDK 9.0.104 and Runtime 9.0.3
    - Resolves: RHEL-81645

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2669 advisory.

    [8.0.114-1.0.1]
    - Add support for Oracle Linux

    [8.0.114-1]
    - Update to .NET SDK 8.0.114 and Runtime 8.0.14
    - Resolves: RHEL-81640

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2670 advisory.

    [8.0.114-1.0.1]
    - Add support for Oracle Linux

    [8.0.114-1]
    - Update to .NET SDK 8.0.114 and Runtime 8.0.14
    - Resolves: RHEL-81639

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-2668 advisory.

    [9.0.104-1.0.1]
    - Add support for Oracle Linux

    [9.0.104-1]
    - Update to .NET SDK 9.0.104 and Runtime 9.0.3
    - Resolves: RHEL-81649

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7345-1 advisory.

    Zahid TOKAT discovered that .NET suffered from a weak authentication vulnerability. An attacker could     possibly use this issue to elevate privileges.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Microsoft .NET Core installed on the remote host is 8.0.x < 8.0.14 or 9.0.x < 9.0.3.
It is, therefore, affected by a vulnerability as referenced in the vendor advisory.

  - Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate     privileges over a network. (CVE-2025-24070)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
233680	Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2025-912)	Nessus	Amazon Linux Local Security Checks	high
232815	RHEL 9 : .NET 8.0 (RHSA-2025:2666)	Nessus	Red Hat Local Security Checks	high
232808	RHEL 8 : .NET 8.0 (RHSA-2025:2670)	Nessus	Red Hat Local Security Checks	high
232799	RHEL 8 : .NET 9.0 (RHSA-2025:2667)	Nessus	Red Hat Local Security Checks	high
232790	RHEL 9 : .NET 9.0 (RHSA-2025:2668)	Nessus	Red Hat Local Security Checks	high
232783	RHEL 9 : .NET 8.0 (RHSA-2025:2669)	Nessus	Red Hat Local Security Checks	high
232738	Security Updates for Microsoft Visual Studio 2022 17.8 / 17.10 / 17.12 / 17.13 Products (March 2025)	Nessus	Windows : Microsoft Bulletins	high
232687	Oracle Linux 8 : .NET / 9.0 (ELSA-2025-2667)	Nessus	Oracle Linux Local Security Checks	high
232671	Oracle Linux 9 : .NET / 8.0 (ELSA-2025-2669)	Nessus	Oracle Linux Local Security Checks	high
232668	Oracle Linux 8 : .NET / 8.0 (ELSA-2025-2670)	Nessus	Oracle Linux Local Security Checks	high
232665	Oracle Linux 9 : .NET / 9.0 (ELSA-2025-2668)	Nessus	Oracle Linux Local Security Checks	high
232647	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : .NET vulnerability (USN-7345-1)	Nessus	Ubuntu Local Security Checks	high
232619	Security Update for Microsoft .NET Core (March 2025)	Nessus	Windows	high

Detections

Analytics

CVE-2025-24070

high

Tenable Plugins

Coming Soon

high

high

high

high

high

high

high

high

high

high

high

high

high