An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:microsoft:asp.net_core:1.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0"
},
{
"last_affected": "1.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:microsoft:asp.net_core:1.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.1"
},
{
"last_affected": "1.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:microsoft:asp.net_core:2.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.1"
},
{
"last_affected": "2.1"
}
],
"source": "CPE_STRING"
}
]
}
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:microsoft:powershell_core:6.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
}
],
"source": "CPE_STRING"
}
]
}