ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
CVE-2021-43877

8.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Visual Studio 2019 Version 16.7 (includes 16.0 – 16.6)
Microsoft Visual Studio 2019 Version 16.9 (includes 16.0 - 16.8)
Microsoft Visual Studio 2019 Version 16.11 (includes 16.0 - 16.10)
Microsoft Visual Studio 2022 Version 17.0
Vendor
CVE Published:
15 December 2021

What is CVE-2021-43877?

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Affected Version(s)

ASP.NET Core 3.1 Unknown 3.0 < 3.1.22

ASP.NET Core 5.0 Unknown 5.0 < 5.0.13

ASP.NET Core 6.0 Unknown 6.0 < 6.0.101

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.