CVE-2022-34716 - Vulnerability Details - OpenCVE

ReportizFlow

.NET Spoofing Vulnerability

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Microsoft	.net .net Core Powershell Powershell Core Visual Studio 2017 Visual Studio 2019 Visual Studio 2022
Redhat	Enterprise Linux Rhel Dotnet

Configuration 1 [-]

OR	cpe:2.3:a:microsoft:.net::::::::
	cpe:2.3:a:microsoft:.net_core::::::::
	cpe:2.3:a:microsoft:powershell::::::::
	cpe:2.3:a:microsoft:powershell::::::::

Package	CPE	Advisory	Released Date
.NET Core on Red Hat Enterprise Linux
rh-dotnet31-dotnet-0:3.1.422-1.el7_9	cpe:/a:redhat:rhel_dotnet:3.1::el7	RHSA-2022:6037	2022-08-10T00:00:00Z
rh-dotnet60-dotnet-0:6.0.108-1.el7_9	cpe:/a:redhat:rhel_dotnet:6.0::el7	RHSA-2022:6038	2022-08-10T00:00:00Z
Red Hat Enterprise Linux 8
dotnet3.1-0:3.1.422-1.el8_6	cpe:/a:redhat:enterprise_linux:8	RHSA-2022:6057	2022-08-15T00:00:00Z
dotnet6.0-0:6.0.108-1.el8_6	cpe:/a:redhat:enterprise_linux:8	RHSA-2022:6058	2022-08-15T00:00:00Z
Red Hat Enterprise Linux 9
dotnet6.0-0:6.0.108-1.el9_0	cpe:/a:redhat:enterprise_linux:9	RHSA-2022:6043	2022-08-10T00:00:00Z

References

Link	Providers
https://github.com/dotnet/announcements/issues/232
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716
https://nvd.nist.gov/vuln/detail/CVE-2022-34716
https://www.cve.org/CVERecord?id=CVE-2022-34716

History

No history.

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2022-08-09T19:55:43

Updated: 2024-08-03T09:15:16.112Z

Reserved: 2022-06-27T00:00:00

Link: CVE-2022-34716

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-08-09T20:15:11.660

Modified: 2024-11-21T07:10:02.710

Link: CVE-2022-34716

Redhat

Severity : Moderate

Publid Date: 2022-08-09T00:00:00Z

Links: CVE-2022-34716 - Bugzilla

{"containers": {"cna": {"title": ".NET Spoofing Vulnerability", "datePublic": "2022-08-09T07:00:00+00:00", "affected": [{"vendor": "Microsoft", "product": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)", "cpes": ["cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*"], "platforms": ["Unknown"], "versions": [{"version": "15.9.0", "lessThan": "15.9.50", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.2", "cpes": ["cpe:2.3:a:microsoft:visual_studio_2022:17.2:*:*:*:*:*:*:*"], "platforms": ["Unknown"], "versions": [{"version": "17.2.0", "lessThan": "17.2.7", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)", "cpes": ["cpe:2.3:a:microsoft:visual_studio_2019:16.9:*:*:*:*:*:*:*"], "platforms": ["Unknown"], "versions": [{"version": "15.0.0", "lessThan": "16.9.24", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)", "cpes": ["cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*"], "platforms": ["Unknown"], "versions": [{"version": "16.11.0", "lessThan": "16.11.18", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.0", "cpes": ["cpe:2.3:a:microsoft:visual_studio_2022:17.0:*:*:*:*:*:*:*"], "platforms": ["Unknown"], "versions": [{"version": "17.0.0", "lessThan": "17.0.13", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": ".NET 6.0", "cpes": ["cpe:2.3:a:microsoft:.net:6.0.0:*:*:*:*:*:*:*"], "platforms": ["Unknown"], "versions": [{"version": "6.0.0", "lessThan": "6.0.8", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": ".NET Core 3.1", "cpes": ["cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*"], "platforms": ["Unknown"], "versions": [{"version": "3.1", "lessThan": "3.1.28", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "PowerShell 7.0", "cpes": ["cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*"], "platforms": ["Unknown"], "versions": [{"version": "7.0.0", "lessThan": "7.0.12", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "PowerShell 7.2", "cpes": ["cpe:2.3:a:microsoft:powershell:7.2:*:*:*:*:*:*:*"], "platforms": ["Unknown"], "versions": [{"version": "7.2.0", "lessThan": "7.2.6", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": ".NET Spoofing Vulnerability", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "Spoofing", "lang": "en-US", "type": "Impact"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2023-12-20T21:27:59.001Z"}, "references": [{"name": ".NET Spoofing Vulnerability", "tags": ["vendor-advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 5.9, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T09:15:16.112Z"}, "title": "CVE Program Container", "references": [{"name": ".NET Spoofing Vulnerability", "tags": ["vendor-advisory", "x_transferred"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716"}]}]}, "cveMetadata": {"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "assignerShortName": "microsoft", "cveId": "CVE-2022-34716", "datePublished": "2022-08-09T19:55:43", "dateReserved": "2022-06-27T00:00:00", "dateUpdated": "2024-08-03T09:15:16.112Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}