NuGet Client Elevation of Privilege Vulnerability

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:6912 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:6913 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-7f5f9ede26 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d80b1d2827 advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability. (CVE-2022-38013)

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f9ca76e479 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8434 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8434 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:6911 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7826 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:6913 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8434 advisory.

  - dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7826 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7826 advisory.

  - dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products installed on the remote macOS or Mac OS X host is missing a security update.
It is, therefore, affected by an escalation of privilege vulnerability. A local attacker can gain the privileges of the user running the Microsoft Visual Studio Application.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6911 advisory.

  - dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6913 advisory.

  - dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6914 advisory.

  - dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6915 advisory.

  - dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6912 advisory.

  - dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An elevation of privilege vulnerability exists in the Microsoft Visual Studio application installed on the host. A local attacker can gain the privileges of the user running the Microsoft Visual Studio application.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6911 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6913 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6912 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A privilege escalation vulnerability exists in .NET core 6.0 < 6.0.10 and .NET Core 3.1 < 3.1.30. An authenticated, local attacker can exploit this, via the NuGet client, to cause the user to execute arbitrary code.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5670-1 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
184815	Rocky Linux 8 : .NET Core 3.1 (RLSA-2022:6912)	Nessus	Rocky Linux Local Security Checks	high
184663	Rocky Linux 9 : .NET 6.0 (RLSA-2022:6913)	Nessus	Rocky Linux Local Security Checks	high
169213	Fedora 35 : dotnet3.1 (2022-7f5f9ede26)	Nessus	Fedora Local Security Checks	high
169167	Fedora 36 : dotnet6.0 (2022-d80b1d2827)	Nessus	Fedora Local Security Checks	high
169060	Fedora 36 : dotnet3.1 (2022-f9ca76e479)	Nessus	Fedora Local Security Checks	high
168235	Oracle Linux 9 : dotnet7.0 (ELSA-2022-8434)	Nessus	Oracle Linux Local Security Checks	high
167833	AlmaLinux 9 : dotnet7.0 (ALSA-2022:8434)	Nessus	Alma Linux Local Security Checks	high
167824	Rocky Linux 8 : .NET 6.0 (RLSA-2022:6911)	Nessus	Rocky Linux Local Security Checks	high
167784	Oracle Linux 8 : dotnet7.0 (ELSA-2022-7826)	Nessus	Oracle Linux Local Security Checks	high
167717	AlmaLinux 9 : .NET 6.0 (ALSA-2022:6913)	Nessus	Alma Linux Local Security Checks	high
167645	RHEL 9 : dotnet7.0 (RHSA-2022:8434)	Nessus	Red Hat Local Security Checks	high
167443	AlmaLinux 8 : dotnet7.0 (ALSA-2022:7826)	Nessus	Alma Linux Local Security Checks	high
167086	RHEL 8 : dotnet7.0 (RHSA-2022:7826)	Nessus	Red Hat Local Security Checks	high
166329	Security Update for Visual Studio 2022 (Oct 2022) (macOS)	Nessus	MacOS X Local Security Checks	high
166152	RHEL 8 : .NET 6.0 (RHSA-2022:6911)	Nessus	Red Hat Local Security Checks	high
166151	RHEL 9 : .NET 6.0 (RHSA-2022:6913)	Nessus	Red Hat Local Security Checks	high
166150	RHEL 7 : .NET Core 3.1 on RHEL 7 (RHSA-2022:6914)	Nessus	Red Hat Local Security Checks	high
166149	RHEL 7 : .NET 6.0 on RHEL 7 (RHSA-2022:6915)	Nessus	Red Hat Local Security Checks	high
166148	RHEL 8 : .NET Core 3.1 (RHSA-2022:6912)	Nessus	Red Hat Local Security Checks	high
166116	Security Updates for Microsoft Visual Studio Products (Oct 2022)	Nessus	Windows : Microsoft Bulletins	high
166104	Oracle Linux 8 : .NET / 6.0 (ELSA-2022-6911)	Nessus	Oracle Linux Local Security Checks	high
166090	Oracle Linux 9 : .NET / 6.0 (ELSA-2022-6913)	Nessus	Oracle Linux Local Security Checks	high
166067	Oracle Linux 8 : .NET / Core / 3.1 (ELSA-2022-6912)	Nessus	Oracle Linux Local Security Checks	high
166054	Security Updates for Microsoft .NET Core (October 2022)	Nessus	Windows	high
166049	Ubuntu 22.04 LTS : .NET 6 vulnerability (USN-5670-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2022-41032

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high