CVE-2024-38167

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38167
.NET and Visual Studio Information Disclosure Vulnerability

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38167 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
History

16 Aug 2024, 19:07

Type Values Removed Values Added
CPE cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
Summary
  • (es) Vulnerabilidad de divulgación de información de .NET y Visual Studio
First Time Microsoft
Microsoft .net
Microsoft visual Studio 2022
CWE NVD-CWE-noinfo
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38167 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38167 - Patch, Vendor Advisory

13 Aug 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-13 18:15

Updated : 2024-08-16 19:07

NVD link : CVE-2024-38167

Mitre link : CVE-2024-38167

CVE.ORG link : CVE-2024-38167

JSON object : View

Products Affected

microsoft

  • .net
  • visual_studio_2022
CWE
NVD-CWE-noinfo CWE-319

Cleartext Transmission of Sensitive Information