Red Hat Security AdvisoryRHSA-2020:3697
.NET Core 3.1 security and bugfix update for Red Hat Enterprise Linux
Released 2020-09-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.8-1.el7, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.8-1.el7, rh-dotnet31-dotnet-3.1.108-1.el7 +8
- .NET Core on Red Hat Enterprise Linux Server (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.8-1.el7, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.8-1.el7, rh-dotnet31-dotnet-3.1.108-1.el7 +8
- .NET Core on Red Hat Enterprise Linux Workstation (v. 7) rh-dotnet31-aspnetcore-runtime-3.1-3.1.8-1.el7, rh-dotnet31-aspnetcore-targeting-pack-3.1-3.1.8-1.el7, rh-dotnet31-dotnet-3.1.108-1.el7 +8
Fixes 1 record
Priority MEDIUM 48
<p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05926 · Published 2020-09-11 · Fixed in publication, 2.1.22 +2
