
We found results for “”
CVE-2024-38167
Good to know:

Date: August 13, 2024
.NET and Visual Studio Information Disclosure Vulnerability
Language: C#
Severity Score
Related Resources (6)
Severity Score
Weakness Type (CWE)
Cleartext Transmission of Sensitive Information
CWE-319Top Fix

Upgrade Version
Upgrade to version IKVM.MSBuild.Tools.runtime.linux-x64 - 8.10.0;IKVM.Image.JDK.runtime.linux-musl-x64 - 8.10.0;Microsoft.NETCore.App.Runtime.linux-arm64 - 8.0.8;IKVM.MSBuild.Tools.runtime.win-x64 - 8.9.0-pre.3;IKVM.MSBuild.Tools.runtime.win-x64 - 8.9.0;IKVM.MSBuild.Tools.runtime.win-x64 - 8.8.0-pre.1;Microsoft.NETCore.App.Runtime.linux-x64 - 8.0.8;IKVM.Image.JDK.runtime.linux-x64 - 8.10.0;IKVM.Image.JRE.runtime.osx-x64 - 8.10.0;Microsoft.NETCore.App.Runtime.win-arm - no_fix;IKVM.Image.JDK.runtime.linux-musl-arm64 - 8.10.0;IKVM.Image.JRE.runtime.win-x64 - 8.8.0-pre.1;IKVM.Image.JRE.runtime.win-x64 - 8.9.0;IKVM.Image.JRE.runtime.win-x64 - 8.9.0-pre.3;IKVM.Image.JRE.runtime.linux-musl-x64 - 8.10.0;IKVM.Image.JRE.runtime.linux-musl-arm64 - 8.10.0;AspNetCoreRuntime.8.0.x64 - 8.0.0-preview-1-23112-2;AspNetCoreRuntime.8.0.x64 - 8.0.5;AspNetCoreRuntime.8.0.x64 - 8.0.0-preview-5-23302-2;AspNetCoreRuntime.8.0.x64 - 8.0.3;AspNetCoreRuntime.8.0.x64 - 8.0.7;Microsoft.Dynamics.BusinessCentral.Development.Tools.Altpgen - 15.0.18.19684-beta;IKVM.Image.JDK.runtime.win-x86 - 8.8.1;IKVM.Image.JRE.runtime.linux-x64 - 8.10.0;Sealights.DotNet.Alpine - 3.11.1;Sealights.DotNet.Linux - 3.11.1;Sealights.DotNet.Agent - no_fix;CefGlue.Common.ARM64 - 120.6099.205;Microsoft.NETCore.App.Runtime.linux-musl-arm - 8.0.8;Microsoft.Security.DevOps.Cli.linux-x64 - 0.210.0;Microsoft.Security.DevOps.Cli.linux-x64 - 0.200.0;IKVM.Image.JRE.runtime.linux-arm - 8.10.0;Microsoft.Dynamics.BusinessCentral.Development.Tools - 15.0.18.19684-beta;dotnet-mgcb-editor-compute-mac - no_fix;AspNetCoreRuntime.8.0.x86 - 8.0.0-preview-5-23302-2;AspNetCoreRuntime.8.0.x86 - 8.0.4;AspNetCoreRuntime.8.0.x86 - 8.0.0-preview-1-23112-2;IKVM.Image.JDK.runtime.linux-arm64 - 8.10.0;Microsoft.Dynamics.BusinessCentral.Development.Tools.Osx - 15.0.18.19684-beta;Microsoft.NETCore.App.Runtime.win-x64 - 8.0.8;Microsoft.NETCore.App.Runtime.osx-arm64 - 8.0.8;Microsoft.Security.DevOps.Cli.win-x64 - 0.200.0;Microsoft.Security.DevOps.Cli.win-x64 - 0.206.1;Microsoft.Security.DevOps.Cli.win-x64 - 0.209.0;IKVM.MSBuild.Tools.runtime.win-arm64 - 8.10.0;IKVM.MSBuild.Tools.runtime.linux-arm - 8.10.0;IKVM.Image.JDK.runtime.osx-x64 - 8.10.0;IKVM.Image.JRE.runtime.linux-arm64 - 8.10.0;IKVM.Image.JDK.runtime.win-x64 - 8.9.0;IKVM.Image.JDK.runtime.win-x64 - 8.8.0-pre.1;IKVM.Image.JDK.runtime.win-x64 - 8.9.0-pre.3;IKVM.Image.JDK.runtime.linux-arm - 8.10.0;VirtualClient - 1.16.33-beta;Microsoft.Security.DevOps.Cli.linux-arm64 - 0.200.0;Microsoft.Security.DevOps.Cli.linux-arm64 - 0.210.0;Microsoft.NETCore.App.Runtime.linux-musl-x64 - 8.0.8;Microsoft.NETCore.App.Runtime.linux-musl-arm64 - 8.0.8;IKVM.Image.JRE.runtime.win-arm64 - 8.10.0;IKVM.Image.JDK.runtime.win-arm64 - 8.10.0;ZWorks - no_fix;Shalev.DotNet.Agent - no_fix;IKVM.MSBuild.Tools.runtime.linux-arm64 - 8.10.0;Kinght.Ning.FastApi.doNetCore6 - no_fix;CoFuse.CefGlue.Common - no_fix;IKVM.Image.JDK.runtime.linux-musl-arm - 8.10.0;Microsoft.ServiceFabricApps.FabricObserver.Linux.SelfContained - 3.3.1;IKVM.Image.JRE.runtime.linux-musl-arm - 8.10.0;Microsoft.ServiceFabricApps.ClusterObserver.Linux.SelfContained - 2.3.1;Microsoft.Dynamics.BusinessCentral.Development.Tools.Linux - 15.0.18.19684-beta;KinghtNing.FastApi.CN - no_fix;IKVM.MSBuild.Tools.runtime.osx-arm64 - 8.10.0;IKVM.Image.JRE.runtime.osx-arm64 - 8.10.0;Microsoft.NETCore.App.Runtime.win-arm64 - 8.0.8;CefGlue.Common - 120.6099.205;Sealights.DotNet.Windows - 3.11.1;Microsoft.NETCore.App.Runtime.linux-arm - 8.0.8;Microsoft.NETCore.App.Runtime.osx-x64 - 8.0.8;IKVM.Image.JRE.runtime.win-x86 - 8.8.1;IKVM.MSBuild.Tools.runtime.osx-x64 - 8.10.0;IKVM.Image.JDK.runtime.osx-arm64 - 8.10.0;Microsoft.NETCore.App.Runtime.win-x86 - 8.0.8
CVSS v3.1
Base Score: |
|
---|---|
Attack Vector (AV): | NETWORK |
Attack Complexity (AC): | LOW |
Privileges Required (PR): | NONE |
User Interaction (UI): | REQUIRED |
Scope (S): | UNCHANGED |
Confidentiality (C): | HIGH |
Integrity (I): | NONE |
Availability (A): | NONE |