CVE-2018-0786

Source
https://nvd.nist.gov/vuln/detail/CVE-2018-0786
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-0786.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-0786
Aliases
Published
2018-01-10T01:29:00Z
Modified
2024-09-03T02:01:13.234014Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability."

References

Affected packages

Git / github.com/dotnet/core

Affected ranges

Type
GIT
Repo
https://github.com/dotnet/core
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Last affected
Last affected
Last affected
Type
GIT
Repo
https://github.com/powershell/powershell
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

Other

SD/688741
SD/692351
SD/693793
SD/695331
SD/700586
SD/704605
SD/706766
SD/709766
SD/709776
SD/715912
SD/717473
SD/725290

v0.*

v0.1.0
v0.2.0
v0.3.0
v0.4.0
v0.5.0
v0.6.0

v1.*

v1.0.0
v1.0.0-rc1
v1.0.0-rc2
v1.1.0

v6.*

v6.0.0
v6.0.0-alpha.10
v6.0.0-alpha.11
v6.0.0-alpha.12
v6.0.0-alpha.13
v6.0.0-alpha.14
v6.0.0-alpha.16
v6.0.0-alpha.17
v6.0.0-alpha.18
v6.0.0-alpha.7
v6.0.0-alpha.8
v6.0.0-alpha.9
v6.0.0-beta.1
v6.0.0-beta.2
v6.0.0-beta.3
v6.0.0-beta.5
v6.0.0-beta.6
v6.0.0-beta.7
v6.0.0-beta.8
v6.0.0-beta.9
v6.0.0-rc
v6.0.0-rc.2