Red Hat Security AdvisoryRHSA-2025:2666
.NET 8.0 security, bug fix, and enhancement update
Released 2025-03-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) aspnetcore-runtime-8.0-8.0.14-1.el9_4, aspnetcore-runtime-dbg-8.0-8.0.14-1.el9_4, aspnetcore-targeting-pack-8.0-8.0.14-1.el9_4 +11
Fixes 1 record
Priority LOW 33
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.0· Network · No auth · No interaction · EPSS 0.01013 · Published 2025-03-11 · Partial fix · 8.0.14, 9.0.3 +5 CWE-1390