CVE-2021-34532HighCVSS 5.5
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is data inside the targeted website like IDs, tokens, cryptographic nonces, and other sensitive information.
🎯 Affected products8
- ASP.NET Core 2.1
- ASP.NET Core 3.1
- ASP.NET Core 5.0
- Microsoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9)
- Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
- Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
- Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
- Visual Studio 2019 for Mac version 8.10
✅ Remediation
KBRelease Notes (Security Update) — fixed build 2.1.29 KBRelease Notes (Security Update) — fixed build 3.1.18 KBRelease Notes (Security Update) — fixed build 5.0.9 KBRelease Notes (Security Update) — fixed build 16.4.25 KBRelease Notes (Security Update) — fixed build 16.7.18 KBRelease Notes (Security Update) — fixed build 16.9.10 KBRelease Notes (Security Update) — fixed build 16.10.5 KBRelease Notes (Security Update) — fixed build 8.10.7
🔗 References (15)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34532
- patchhttps://dotnet.microsoft.com/download/dotnet-core/2.1
- referencehttps://github.com/dotnet/announcements/issues/195
- patchhttps://dotnet.microsoft.com/download/dotnet-core/3.1
- patchhttps://dotnet.microsoft.com/download/dotnet/5.0
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.4
- referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.4
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7
- referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.7
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9
- referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9
- patchhttp://aka.ms/vs/16/release/latest
- referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.10
- patchhttps://visualstudio.microsoft.com/vs/mac/
- referencehttps://docs.microsoft.com/visualstudio/releasenotes/vs2019-mac-relnotes