There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication
    tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".
    (CVE-2017-11879)

远程 Windows 主机上安装的 ASP.NET Core 运行时包存储版本低于 2.0.12219.0。因而主机会受到多个漏洞影响：- 可导致权限提升的开放重定向漏洞。(CVE-2017-11879) - 未正确处理网页请求时即会触发的缺陷。此缺陷可使依赖环境的攻击者造成拒绝服务。(CVE-2017-11883)

遠端 Windows 主機安裝了版本比 2.0.12219.0 舊的 ASP.NET Core 執行階段封裝存放區。因此，該主機受到多個弱點影響：- 可導致權限提升的一個開放重新導向弱點。(CVE-2017-11879) - 當未正確處理網路要求時觸發的一個缺陷。這會允許內容相依的攻擊者造成拒絕服務。(CVE-2017-11883)

The remote Windows host has an installation of ASP.NET Core runtime package store with a version less than 2.0.12219.0.
Therefore the host is affected by multiple vulnerabilities :

  - An open redirect vulnerability that can lead to an escalation of privilege.
     (CVE-2017-11879)

  - A flaw that is triggered as web requests are not properly handled. これにより、コンテキストに依存する攻撃者がサービス拒否を引き起こすことができます。
     (CVE-2017-11883)

The remote Windows host has an installation of ASP.NET Core runtime package store with a version less than 2.0.12219.0.
Therefore the host is affected by multiple vulnerabilities :

  -  An open redirect vulnerability      that can lead to an escalation of privilege.
     (CVE-2017-11879)

  -  A flaw that is triggered as web requests are not properly      handled. This may allow a context-dependent attacker to cause      a denial of service.
     (CVE-2017-11883)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
409728	SCA: security update for Microsoft.AspNetCore.All, Microsoft.AspNetCore.Mvc.Core (GHSA-3wcj-rg8q-9cqv)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	high
409728	SCA: security update for Microsoft.AspNetCore.All, Microsoft.AspNetCore.Mvc.Core (GHSA-3wcj-rg8q-9cqv)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	high
104665	安全更新 ASP .NET Core 2017 年 9 月	Nessus	Windows	2017/11/17	2026/5/19	high
104665	安全性更新 ASP .NET Core 2017 年 9 月	Nessus	Windows	2017/11/17	2026/5/19	high
104665	ASP.NET Coreのセキュリティ更新プログラム2017年9月	Nessus	Windows	2017/11/17	2026/5/19	high
104665	Security Update ASP .NET Core September 2017	Nessus	Windows	2017/11/17	2026/5/19	high

检测

插件搜索

high

high

high

high

high

high