CVE-2018-8356

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-8356
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8356.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-8356
Aliases
Published
2018-07-11T00:29:02.587Z
Modified
2026-07-08T05:52:36.021162383Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 1.0, .NET Core 2.0, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.0-sp2"
                },
                {
                    "last_affected": "3.0-sp2"
                },
                {
                    "introduced": "3.5"
                },
                {
                    "last_affected": "3.5"
                },
                {
                    "introduced": "3.5.1"
                },
                {
                    "last_affected": "3.5.1"
                },
                {
                    "introduced": "4.5.2"
                },
                {
                    "last_affected": "4.5.2"
                },
                {
                    "introduced": "4.6"
                },
                {
                    "last_affected": "4.6"
                },
                {
                    "introduced": "4.6.2"
                },
                {
                    "last_affected": "4.6.2"
                },
                {
                    "introduced": "4.7"
                },
                {
                    "last_affected": "4.7"
                },
                {
                    "introduced": "4.7.1"
                },
                {
                    "last_affected": "4.7.1"
                },
                {
                    "introduced": "4.7.2"
                },
                {
                    "last_affected": "4.7.2"
                },
                {
                    "introduced": "4.6"
                },
                {
                    "last_affected": "4.6"
                },
                {
                    "introduced": "4.6.1"
                },
                {
                    "last_affected": "4.6.1"
                },
                {
                    "introduced": "4.6.2"
                },
                {
                    "last_affected": "4.6.2"
                },
                {
                    "introduced": "4.6"
                },
                {
                    "last_affected": "4.6"
                },
                {
                    "introduced": "4.6.1"
                },
                {
                    "last_affected": "4.6.1"
                },
                {
                    "introduced": "4.6.2"
                },
                {
                    "last_affected": "4.6.2"
                },
                {
                    "introduced": "4.7"
                },
                {
                    "last_affected": "4.7"
                },
                {
                    "introduced": "4.7.1"
                },
                {
                    "last_affected": "4.7.1"
                },
                {
                    "introduced": "4.7.2"
                },
                {
                    "last_affected": "4.7.2"
                },
                {
                    "introduced": "4.7.2"
                },
                {
                    "last_affected": "4.7.2"
                }
            ],
            "cpes": [
                "cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*",
                "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
                "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "microsoft:.net_framework"
        },
        {
            "extracted_events": [
                {
                    "introduced": "4.7.2"
                },
                {
                    "last_affected": "4.7.2"
                }
            ],
            "cpes": [
                "cpe:2.3:a:microsoft:.net_framework_developer_pack:4.7.2:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "microsoft:.net_framework_developer_pack"
        }
    ]
}
References

Affected packages

Git
github.com/dotnet/aspnetcore

Affected ranges

Type
GIT
Repo
https://github.com/dotnet/aspnetcore
Events
Introduced
93ef04d69d1f1a189e9c342f656e85af50a14bb6
Last affected
999787ace6778fae7ddb77178052231d7351f706
Database specific 
{
    "cpe": [
        "cpe:2.3:a:microsoft:asp.net_core:1.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:microsoft:asp.net_core:1.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:microsoft:asp.net_core:2.0:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "1.0"
        },
        {
            "last_affected": "1.0"
        },
        {
            "introduced": "1.1"
        },
        {
            "last_affected": "1.1"
        },
        {
            "introduced": "2.0"
        },
        {
            "last_affected": "2.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

1.*
1.0
1.0.0
1.0.1
1.0.3
1.0.4
1.0.5
1.1
1.1.0
1.1.0-preview1
1.1.1
1.1.2
1.1.3
2.*
2.0
2.0.0
2.0.0-preview1
2.0.0-preview2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8356.json"
github.com/dotnet/core

Affected ranges

Type
GIT
Repo
https://github.com/dotnet/core
Events
Introduced
6251598c0087239b392cccda68515cd8c71d7f3d
Last affected
f3c64ec2d713c053b20bcf90e962cd7fb161370c
Database specific 
{
    "cpe": [
        "cpe:2.3:a:microsoft:.net_core:1.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:microsoft:.net_core:1.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:microsoft:.net_core:2.0:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "1.0"
        },
        {
            "last_affected": "1.0"
        },
        {
            "introduced": "1.1"
        },
        {
            "last_affected": "1.1"
        },
        {
            "introduced": "2.0"
        },
        {
            "last_affected": "2.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

1.*
1.0
1.1
2.*
2.0
v1.*
v1.0.0
v1.0.1
v1.0.2
v1.0.3
v1.0.4
v1.0.5
v1.1
v1.1.0
v1.1.0-preview1
v1.1.1
v1.1.2
v2.*
v2.0.0
v2.0.0-preview1
v2.0.0-preview2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8356.json"
github.com/powershell/powershell

Affected ranges

Type
GIT
Repo
https://github.com/powershell/powershell
Events
Introduced
2f818615bed15141c062dd185f659ed110d9c6ba
Last affected
855d2b9d75bd5b92e1929676d3ec6e13ef3e6838
Database specific 
{
    "cpe": [
        "cpe:2.3:a:microsoft:powershell_core:6.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:microsoft:powershell_core:6.1:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "6.0"
        },
        {
            "last_affected": "6.0"
        },
        {
            "introduced": "6.1"
        },
        {
            "last_affected": "6.1"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

6.*
6.0
6.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8356.json"