CVE-2021-34485

Description

.NET Core and Visual Studio Information Disclosure Vulnerability

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.966

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2021-1721,CVE-2021-24112,CVE-2021-26423,CVE-2021-26701,CVE-2021-34485 are fixed in Update for AspNet Core (x64) (2.1.30)Windows
Vulnerabilities CVE-2021-1721,CVE-2021-24112,CVE-2021-26423,CVE-2021-26701,CVE-2021-34485 are fixed in Update for AspNet Core (x86) (2.1.30)Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Update for AspNet Core (x64) (2.1.30)Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Update for AspNet Core (x86) (2.1.30)Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Update for AspNet Core (x64) (3.1.18)Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Update for AspNet Core (x86) (3.1.18)Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Update for AspNet Core (x64) (5.0.9)Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Update for AspNet Core (x86) (5.0.9)Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Microsoft Visual Studio Community 2017 15.9.38Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Microsoft Visual Studio Enterprise 2017 15.9.38Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Microsoft Visual Studio Professional 2017 15.9.38Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485,CVE-2021-34532 are fixed in Microsoft Visual Studio Community 2019 16.10.5Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485,CVE-2021-34532 are fixed in Microsoft Visual Studio Community 2019 16.9.10Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485,CVE-2021-34532 are fixed in Microsoft Visual Studio Community 2019 16.7.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485,CVE-2021-34532 are fixed in Microsoft Visual Studio Community 2019 16.4.25Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485,CVE-2021-34532 are fixed in Microsoft Visual Studio Enterprise 2019 16.10.5Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485,CVE-2021-34532 are fixed in Microsoft Visual Studio Enterprise 2019 16.9.10Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485,CVE-2021-34532 are fixed in Microsoft Visual Studio Enterprise 2019 16.7.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485,CVE-2021-34532 are fixed in Microsoft Visual Studio Enterprise 2019 16.4.25Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485,CVE-2021-34532 are fixed in Microsoft Visual Studio Professional 2019 16.10.5Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485,CVE-2021-34532 are fixed in Microsoft Visual Studio Professional 2019 16.9.10Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485,CVE-2021-34532 are fixed in Microsoft Visual Studio Professional 2019 16.7.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485,CVE-2021-34532 are fixed in Microsoft Visual Studio Professional 2019 16.4.25Windows
Vulnerabilities CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App 2.1.29Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget-Microsoft.NETCore.App.Runtime.win-arm 3.1.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget-Microsoft.NETCore.App.Runtime.win-arm 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget-Microsoft.NETCore.App.Runtime.linux-arm 3.1.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget-Microsoft.NETCore.App.Runtime.linux-arm 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget-Microsoft.NetCore.App.Runtime.linux-musl-arm 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget-Microsoft.NETCore.App.Runtime.Mono.linux-arm 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-arm64 3.1.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-arm64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-musl-arm64 3.1.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-musl-arm64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-musl-x64 3.1.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-musl-x64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-x64 3.1.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-x64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.osx-x64 3.1.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.osx-x64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.rhel.6-x64 3.1.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.win-arm64 3.1.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.win-arm64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.win-x64 3.1.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.win-x64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.win-x86 3.1.18Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.win-x86 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.linux-arm64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.linux-x64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 5.0.9Windows
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.osx-x64 5.0.9Windows
(RHSA-2021:3145) .NET Core 2.1 security and bugfix update dotnet-debugsource-2.1.525-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3145) .NET Core 2.1 security and bugfix update dotnet-host-fxr-2.1-2.1.29-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3145) .NET Core 2.1 security and bugfix update dotnet-runtime-2.1-2.1.29-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3145) .NET Core 2.1 security and bugfix update dotnet-sdk-2.1-2.1.525-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3145) .NET Core 2.1 security and bugfix update dotnet-sdk-2.1.5xx-2.1.525-1.el8_4.x86_64.rpmLinux
Aspnetcore-runtime-3.1 update (ELSA-2021-3142) aspnetcore-runtime-3.1-3.1.18-1.0.1.el8_4.x86_64.rpmLinux
Aspnetcore-targeting-pack-3.1 update (ELSA-2021-3142) aspnetcore-targeting-pack-3.1-3.1.18-1.0.1.el8_4.x86_64.rpmLinux
Dotnet-apphost-pack-3.1 update (ELSA-2021-3142) dotnet-apphost-pack-3.1-3.1.18-1.0.1.el8_4.x86_64.rpmLinux
Dotnet-hostfxr-3.1 update (ELSA-2021-3142) dotnet-hostfxr-3.1-3.1.18-1.0.1.el8_4.x86_64.rpmLinux
Dotnet-runtime-3.1 update (ELSA-2021-3142) dotnet-runtime-3.1-3.1.18-1.0.1.el8_4.x86_64.rpmLinux
Dotnet-sdk-3.1 update (ELSA-2021-3142) dotnet-sdk-3.1-3.1.118-1.0.1.el8_4.x86_64.rpmLinux
Dotnet-targeting-pack-3.1 update (ELSA-2021-3142) dotnet-targeting-pack-3.1-3.1.18-1.0.1.el8_4.x86_64.rpmLinux
Dotnet-templates-3.1 update (ELSA-2021-3142) dotnet-templates-3.1-3.1.118-1.0.1.el8_4.x86_64.rpmLinux
Dotnet-host-fxr-2.1 update (ELSA-2021-3145) dotnet-host-fxr-2.1-2.1.29-1.el8_4.x86_64.rpmLinux
Dotnet-runtime-2.1 update (ELSA-2021-3145) dotnet-runtime-2.1-2.1.29-1.el8_4.x86_64.rpmLinux
Dotnet-sdk-2.1 update (ELSA-2021-3145) dotnet-sdk-2.1-2.1.525-1.el8_4.x86_64.rpmLinux
Dotnet-sdk-2.1.5xx update (ELSA-2021-3145) dotnet-sdk-2.1.5xx-2.1.525-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3148) .NET 5.0 security and bugfix update aspnetcore-runtime-5.0-5.0.9-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3148) .NET 5.0 security and bugfix update aspnetcore-targeting-pack-5.0-5.0.9-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3148) .NET 5.0 security and bugfix update dotnet-5.0.206-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3148) .NET 5.0 security and bugfix update dotnet-apphost-pack-5.0-5.0.9-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3148) .NET 5.0 security and bugfix update dotnet-host-5.0.9-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3148) .NET 5.0 security and bugfix update dotnet-hostfxr-5.0-5.0.9-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3148) .NET 5.0 security and bugfix update dotnet-runtime-5.0-5.0.9-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3148) .NET 5.0 security and bugfix update dotnet-sdk-5.0-5.0.206-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3148) .NET 5.0 security and bugfix update dotnet-targeting-pack-5.0-5.0.9-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3148) .NET 5.0 security and bugfix update dotnet-templates-5.0-5.0.206-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3148) .NET 5.0 security and bugfix update dotnet5.0-debugsource-5.0.206-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3148) .NET 5.0 security and bugfix update netstandard-targeting-pack-2.1-5.0.206-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3145)Low: Core 2.1 security and bugfix update dotnet-debuginfo-2.1.525-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3145)Low: Core 2.1 security and bugfix update dotnet-host-fxr-2.1-debuginfo-2.1.29-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3145)Low: Core 2.1 security and bugfix update dotnet-runtime-2.1-debuginfo-2.1.29-1.el8_4.x86_64.rpmLinux
(RHSA-2021:3145)Low: Core 2.1 security and bugfix update dotnet-sdk-2.1.5xx-debuginfo-2.1.525-1.el8_4.x86_64.rpmLinux
Vulnerabilities CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App for Linux 2.1.29Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget-Microsoft.NETCore.App.Runtime.win-arm for Linux 3.1.18Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget-Microsoft.NETCore.App.Runtime.win-arm for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget-Microsoft.NETCore.App.Runtime.linux-arm for Linux 3.1.18Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget-Microsoft.NETCore.App.Runtime.linux-arm for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget-Microsoft.NetCore.App.Runtime.linux-musl-arm for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget-Microsoft.NETCore.App.Runtime.Mono.linux-arm for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-arm64 for Linux 3.1.18Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-arm64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-musl-arm64 for Linux 3.1.18Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-musl-arm64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-musl-x64 for Linux 3.1.18Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-musl-x64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-x64 for Linux 3.1.18Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.linux-x64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.osx-x64 for Linux 3.1.18Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.osx-x64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.rhel.6-x64 for Linux 3.1.18Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.win-arm64 for Linux 3.1.18Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.win-arm64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.win-x64 for Linux 3.1.18Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.win-x64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.win-x86 for Linux 3.1.18Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.win-x86 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.linux-arm64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.linux-x64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 for Linux 5.0.9Linux
Vulnerabilities CVE-2021-26423,CVE-2021-34485 are fixed in Nuget - Microsoft.NETCore.App.Runtime.Mono.osx-x64 for Linux 5.0.9Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-108337Update for AspNet Core (x64) (2.1.30)
PATCH-108340Update for AspNet Core (x86) (2.1.30)
PATCH-108337Update for AspNet Core (x64) (2.1.30)
PATCH-108340Update for AspNet Core (x86) (2.1.30)
PATCH-108325Update for AspNet Core (x64) (3.1.18)
PATCH-108328Update for AspNet Core (x86) (3.1.18)
PATCH-108326Update for AspNet Core (x64) (5.0.9)
PATCH-108329Update for AspNet Core (x86) (5.0.9)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234