ASP.NET and Visual Studio Security Feature Bypass Vulnerability

An update of the dotnet package has been released.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:4058 advisory.

  - ASP.NET and Visual Studio Security Feature Bypass Vulnerability (CVE-2023-33170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:4059 advisory.

  - ASP.NET and Visual Studio Security Feature Bypass Vulnerability (CVE-2023-33170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-302 advisory.

    ASP.NET and Visual Studio Security Feature Bypass Vulnerability (CVE-2023-33170)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4449 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.120 and .NET Runtime 6.0.20.

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4448 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.120 and .NET Runtime 6.0.20.

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4a48637c3f advisory.

    This is the July 2023 update for .NET 6. It updates the SDK to 6.0.120 and Runtime to 6.0.20.

    https://github.com/dotnet/announcements/issues/262

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-feda45bc39 advisory.

    This is the July 2023 update for .NET 6. It updates the SDK to 6.0.120 and Runtime to 6.0.20.

    https://github.com/dotnet/announcements/issues/262

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d25e798d6c advisory.

    This is the July 2023 monthly update for .NET 7. It updates the SDK to 7.0.109 and Runtime to 7.0.9.

    https://github.com/dotnet/announcements/issues/262

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-18264c31f6 advisory.

    This is the July 2023 monthly update for .NET 7. It updates the SDK to 7.0.109 and Runtime to 7.0.9.

    https://github.com/dotnet/announcements/issues/262

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4058 advisory.

    [7.0.109-1.0.1]
    - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152]

    [7.0.109-1]
    - Update to .NET SDK 7.0.109 and Runtime 7.0.9
    - Resolves: RHBZ#2219632

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4057 advisory.

    [7.0.109-1.0.1]
    - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152]

    [7.0.109-1]
    - Update to .NET SDK 7.0.109 and Runtime 7.0.9
    - Resolves: RHBZ#2219632

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4059 advisory.

    [6.0.120-1.0.1]
    - Add missing Oracle Linux Runtime IDs

    [6.0.120-1]
    - Update to .NET SDK 6.0.120 and Runtime 6.0.20
    - Resolves: RHBZ#2219637

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4060 advisory.

    [6.0.120-1.0.1]
    - Add missing Oracle Linux Runtime IDs

    [6.0.120-1]
    - Update to .NET SDK 6.0.120 and Runtime 6.0.20
    - Resolves: RHBZ#2219637

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2023_July_11 advisory.

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. (CVE-2023-33127)   
  - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising the integrity of the system/application. (CVE-2023-33170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4057 advisory.

  - ASP.NET and Visual Studio Security Feature Bypass Vulnerability (CVE-2023-33170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4059 advisory.

  - ASP.NET and Visual Studio Security Feature Bypass Vulnerability (CVE-2023-33170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4058 advisory.

  - ASP.NET and Visual Studio Security Feature Bypass Vulnerability (CVE-2023-33170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4060 advisory.

  - ASP.NET and Visual Studio Security Feature Bypass Vulnerability (CVE-2023-33170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4060 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    The following packages have been upgraded to a later upstream version: dotnet6.0 (SDK 6.0.120, Runtime     6.0.20). (BZ#2219640)

    Security Fix(es):

    * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4058 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime     7.0.9). (BZ#2219633)

    Security Fix(es):

    * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4061 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    The following packages have been upgraded to a later upstream version: rh-dotnet60-dotnet (SDK 6.0.120,     Runtime 6.0.20). (BZ#2219635)

    Security Fix(es):

    * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4059 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    The following packages have been upgraded to a later upstream version: dotnet6.0 (SDK 6.0.120, Runtime     6.0.20). (BZ#2219639)

    Security Fix(es):

    * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4057 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime     7.0.9). (BZ#2219634)

    Security Fix(es):

    * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6217-1 advisory.

    McKee-Harris, Matt Cotterell, and Jack Moran discovered that .NET did not properly update account lockout     maximum failed attempts. An attacker could possibly use this issue to bypass the security feature and     attempt to guess more passwords for an account.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Multiple vulnerabilities exist in ASP.NET Core 6.0 < 6.0.20 and ASP.NET Core 7.0 < 7.0.9.

  - A vulnerability exists in .NET applications where the diagnostic server can be exploited to achieve   cross-session/cross-user elevation of privilege (EoP) and code execution. (CVE-2023-33127)

  - A vulnerability exists in ASP.NET Core applications where account lockout maximum failed attempts may not   be immediately updated, allowing an attacker to try more passwords. (CVE-2023-33170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023_Jul_11 advisory.

  - .NET and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-33127)

  - ASP.NET and Visual Studio Security Feature Bypass Vulnerability (CVE-2023-33170)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A vulnerability exist in ASP.NET Core applications where account lockout maximum failed attempts may     not be immediately updated, allowing an attacker to try more passwords. (CVE-2023-33170)

  - A vulnerability exists in .NET applications where the diagnostic server can be exploited to achieve     cross-session/cross-user elevation of privilege (EoP) and code execution. (CVE-2023-33127)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
237067	Photon OS 4.0: Dotnet PHSA-2025-4.0-0804	Nessus	PhotonOS Local Security Checks	high
234310	Photon OS 5.0: Dotnet PHSA-2025-5.0-0499	Nessus	PhotonOS Local Security Checks	critical
180402	Rocky Linux 8 : .NET 7.0 (RLSA-2023:4058)	Nessus	Rocky Linux Local Security Checks	high
180392	Rocky Linux 8 : .NET 6.0 (RLSA-2023:4059)	Nessus	Rocky Linux Local Security Checks	high
180108	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-302)	Nessus	Amazon Linux Local Security Checks	high
179308	RHEL 9 : .NET 6.0 (RHSA-2023:4449)	Nessus	Red Hat Local Security Checks	high
179307	RHEL 8 : .NET 6.0 (RHSA-2023:4448)	Nessus	Red Hat Local Security Checks	high
178736	Fedora 37 : dotnet6.0 (2023-4a48637c3f)	Nessus	Fedora Local Security Checks	high
178734	Fedora 38 : dotnet6.0 (2023-feda45bc39)	Nessus	Fedora Local Security Checks	high
178730	Fedora 38 : dotnet7.0 (2023-d25e798d6c)	Nessus	Fedora Local Security Checks	high
178728	Fedora 37 : dotnet7.0 (2023-18264c31f6)	Nessus	Fedora Local Security Checks	high
178584	Oracle Linux 8 : .NET / 7.0 (ELSA-2023-4058)	Nessus	Oracle Linux Local Security Checks	high
178581	Oracle Linux 9 : .NET / 7.0 (ELSA-2023-4057)	Nessus	Oracle Linux Local Security Checks	high
178343	Oracle Linux 8 : .NET / 6.0 (ELSA-2023-4059)	Nessus	Oracle Linux Local Security Checks	high
178341	Oracle Linux 9 : .NET / 6.0 (ELSA-2023-4060)	Nessus	Oracle Linux Local Security Checks	high
178297	Security Update for .NET Core SDK (July 2023)	Nessus	Windows	high
178296	AlmaLinux 9 : .NET 7.0 (ALSA-2023:4057)	Nessus	Alma Linux Local Security Checks	high
178295	AlmaLinux 8 : .NET 6.0 (ALSA-2023:4059)	Nessus	Alma Linux Local Security Checks	high
178294	AlmaLinux 8 : .NET 7.0 (ALSA-2023:4058)	Nessus	Alma Linux Local Security Checks	high
178284	AlmaLinux 9 : .NET 6.0 (ALSA-2023:4060)	Nessus	Alma Linux Local Security Checks	high
178270	RHEL 9 : .NET 6.0 (RHSA-2023:4060)	Nessus	Red Hat Local Security Checks	high
178269	RHEL 8 : .NET 7.0 (RHSA-2023:4058)	Nessus	Red Hat Local Security Checks	high
178252	RHEL 7 : .NET 6.0 (RHSA-2023:4061)	Nessus	Red Hat Local Security Checks	high
178250	RHEL 8 : .NET 6.0 (RHSA-2023:4059)	Nessus	Red Hat Local Security Checks	high
178246	RHEL 9 : .NET 7.0 (RHSA-2023:4057)	Nessus	Red Hat Local Security Checks	high
178209	Ubuntu 22.04 LTS / 23.04 : .NET vulnerability (USN-6217-1)	Nessus	Ubuntu Local Security Checks	high
178206	Security Updates for Microsoft ASP.NET Core (July 2023)	Nessus	Windows : Microsoft Bulletins	high
178193	Security Update for Microsoft .NET Core (July 2023)	Nessus	Windows	high
178161	Security Updates for Microsoft Visual Studio Products (July 2023)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2023-33170

high

Tenable Plugins

high

critical

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high