Security Update for Microsoft ASP.NET Core (November 2023) (CVE-2023-36038)

high Nessus Plugin ID 185883

Language:

Version 1.8 Apr 29, 2024, 9:06 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202404290906
Version 1.7 Feb 16, 2024, 12:17 PM IAVM reference Plugin Feed: 202402161217
Version 1.6 Dec 18, 2023, 2:01 PM CVSS metrics ("CVSSv3 score" set to 7.5. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") Plugin Feed: 202312181401
Version 1.5 Dec 15, 2023, 2:39 PM CVSS metrics ("CVSSv2 score" set to 7.8. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C") Plugin Feed: 202312151439
Version 1.4 Dec 5, 2023, 2:37 PM CVSS metrics ("CVSSv2 score" set to 8.5. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:C". "CVSSv3 score" set to 8.2. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H") Plugin Feed: 202312051437
Version 1.3 Nov 21, 2023, 2:21 PM CVSS metrics ("CVSSv2 score" set to 7.8. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2023-36038, severity increased from "Medium" to "High") Plugin Feed: 202311211421
Version 1.2 Nov 17, 2023, 3:11 PM CVSS metrics ("CVSSv2 score" set to 5.0. "CVSSv3 score" set to 7.5. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H". "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P") CVSSv2 severity (based on CVE-2023-36038, severity decreased from "High" to "Medium") Plugin Feed: 202311171511
Version 1.1 Nov 16, 2023, 9:15 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202311162115
Version 1.1 Nov 17, 2023, 12:59 PM CVSS metrics ("CVSSv2 score" set to 5.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P") CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSSv2 severity (based on CVE-2023-36038, severity decreased from "High" to "Medium") Plugin Feed: 202311171259
Version 1.0 Nov 16, 2023, 2:33 PM New Plugin Feed: 202311161433
Version 1.0 Nov 16, 2023, 7:01 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202311161901

* Changelogs are generally available for changes made after Nov 1, 2022