CVEvulnerability

CVE-2018-8356

5.5 MEDIUM Published 2018-07-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-07-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-295

Description

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 1.0, .NET Core 2.0, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.

Affected configurations

• microsoft .net framework 3.0 • microsoft .net framework 3.5 • microsoft .net framework 3.5.1 • microsoft .net framework 4.5.2 • microsoft .net framework 4.6 • microsoft .net framework 4.6.2 • microsoft .net framework 4.7 • microsoft .net framework 4.7.1 • microsoft .net framework 4.7.2 • microsoft .net framework 4.6.1 • microsoft powershell core 6.0 • microsoft powershell core 6.1 • microsoft .net core 1.0 • microsoft .net core 1.1 • microsoft .net core 2.0 • microsoft .net framework developer pack 4.7.2 • microsoft asp.net core 1.0 • microsoft asp.net core 1.1 • microsoft asp.net core 2.0

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References