ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.     (CVE-2022-24513, CVE-2022-24765, CVE-2021-43877)

  - A DLL hijacking vulnerability. An authenticated attacker can exploit this to execute arbitrary code.     (CVE-2022-24767)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft ASP.NET Core installations on the remote host are missing a security update. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by the following vulnerability:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2021-43877)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
159733	Security Updates for Microsoft Visual Studio Products (April 2022)	Nessus	Windows : Microsoft Bulletins	high
156227	Security Updates for Microsoft ASP.NET Core (December 2021)	Nessus	Windows	high
156194	Security Updates for Microsoft Visual Studio Products (December 2021)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2021-43877

high

Tenable Plugins

high

high

high