GSD-2022-30184
Vulnerability from gsd - Updated: 2023-12-13 01:19Details
.NET and Visual Studio Information Disclosure Vulnerability.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2022-30184",
"description": ".NET and Visual Studio Information Disclosure Vulnerability.",
"id": "GSD-2022-30184",
"references": [
"https://linux.oracle.com/cve/CVE-2022-30184.html",
"https://access.redhat.com/errata/RHSA-2022:5046",
"https://access.redhat.com/errata/RHSA-2022:5047",
"https://access.redhat.com/errata/RHSA-2022:5050",
"https://access.redhat.com/errata/RHSA-2022:5061",
"https://access.redhat.com/errata/RHSA-2022:5062"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2022-30184"
],
"details": ".NET and Visual Studio Information Disclosure Vulnerability.",
"id": "GSD-2022-30184",
"modified": "2023-12-13T01:19:36.700470Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2022-30184",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": ".NET 6.0",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "6.0.0",
"version_value": "6.0.6"
}
]
}
},
{
"product_name": ".NET Core 3.1",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "3.1",
"version_value": "3.1.26"
}
]
}
},
{
"product_name": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "15.0.0",
"version_value": "16.9.22"
}
]
}
},
{
"product_name": "Visual Studio 2019 for Mac version 8.10",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "8.1.0",
"version_value": "17.0.2"
}
]
}
},
{
"product_name": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "16.11.0",
"version_value": "16.11.16"
}
]
}
},
{
"product_name": "Microsoft Visual Studio 2022 version 17.0",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "17.0.0",
"version_value": "17.0.11"
}
]
}
},
{
"product_name": "Microsoft Visual Studio 2022 version 17.2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "17.2.0",
"version_value": "17.2.4"
}
]
}
},
{
"product_name": "NuGet.exe",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "6.0.0",
"version_value": "6.2.0"
}
]
}
},
{
"product_name": "Visual Studio 2022 for Mac version 17.0",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "17.0.0",
"version_value": "17.0.2"
}
]
}
}
]
},
"vendor_name": "Microsoft"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": ".NET and Visual Studio Information Disclosure Vulnerability"
}
]
},
"impact": {
"cvss": [
{
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Information Disclosure"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30184",
"refsource": "MISC",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30184"
},
{
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWNH4AC3LFVX35MDRX5OBZDGD2AMH66K/",
"refsource": "MISC",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWNH4AC3LFVX35MDRX5OBZDGD2AMH66K/"
},
{
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DMP34G53EA2DBTBLFOAQCDZRRENE2EA2/",
"refsource": "MISC",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DMP34G53EA2DBTBLFOAQCDZRRENE2EA2/"
}
]
}
},
"gitlab.com": {
"advisories": [
{
"affected_range": "[3.5.0,4.9.5),[5.0.0,5.2.1),[5.3.0,5.7.2),[5.8.0,5.9.2),[5.10.0,5.11.2),[6.0.0,6.0.2),[6.1.0,6.2.1)",
"affected_versions": "All versions starting from 3.5.0 before 4.9.5, all versions starting from 5.0.0 before 5.2.1, all versions starting from 5.3.0 before 5.7.2, all versions starting from 5.8.0 before 5.9.2, all versions starting from 5.10.0 before 5.11.2, all versions starting from 6.0.0 before 6.0.2, all versions starting from 6.1.0 before 6.2.1",
"cwe_ids": [
"CWE-1035",
"CWE-937"
],
"date": "2022-06-14",
"description": "Potential leak of NuGet.org API key",
"fixed_versions": [
"4.9.5",
"5.2.1",
"5.7.2",
"5.9.2",
"5.11.2",
"6.0.2",
"6.2.1"
],
"identifier": "GMS-2022-2162",
"identifiers": [
"GHSA-3885-8gqc-3wpf",
"GMS-2022-2162",
"CVE-2022-30184"
],
"not_impacted": "All versions before 3.5.0, all versions starting from 4.9.5 before 5.0.0, all versions starting from 5.2.1 before 5.3.0, all versions starting from 5.7.2 before 5.8.0, all versions starting from 5.9.2 before 5.10.0, all versions starting from 5.11.2 before 6.0.0, all versions starting from 6.0.2 before 6.1.0, all versions starting from 6.2.1",
"package_slug": "nuget/NuGet.CommandLine.XPlat",
"pubdate": "2022-06-14",
"solution": "Upgrade to versions 4.9.5, 5.2.1, 5.7.2, 5.9.2, 5.11.2, 6.0.2, 6.2.1 or above.",
"title": "Key Management Errors",
"urls": [
"https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-3885-8gqc-3wpf",
"https://github.com/advisories/GHSA-3885-8gqc-3wpf"
],
"uuid": "b577caaa-8a8f-4391-94c5-a211ae3183fb"
},
{
"affected_range": "[3.5.0,4.9.5),[5.0.0,5.2.1),[5.3.0,5.7.2),[5.8.0,5.9.2),[5.10.0,5.11.2),[6.0.0,6.0.2),[6.1.0,6.2.1)",
"affected_versions": "All versions starting from 3.5.0 before 4.9.5, all versions starting from 5.0.0 before 5.2.1, all versions starting from 5.3.0 before 5.7.2, all versions starting from 5.8.0 before 5.9.2, all versions starting from 5.10.0 before 5.11.2, all versions starting from 6.0.0 before 6.0.2, all versions starting from 6.1.0 before 6.2.1",
"cwe_ids": [
"CWE-1035",
"CWE-937"
],
"date": "2022-06-14",
"description": "Potential leak of NuGet.org API key",
"fixed_versions": [
"4.9.5",
"5.2.1",
"5.7.2",
"5.9.2",
"5.11.2",
"6.0.2",
"6.2.1"
],
"identifier": "GMS-2022-2161",
"identifiers": [
"GHSA-3885-8gqc-3wpf",
"GMS-2022-2161",
"CVE-2022-30184"
],
"not_impacted": "All versions before 3.5.0, all versions starting from 4.9.5 before 5.0.0, all versions starting from 5.2.1 before 5.3.0, all versions starting from 5.7.2 before 5.8.0, all versions starting from 5.9.2 before 5.10.0, all versions starting from 5.11.2 before 6.0.0, all versions starting from 6.0.2 before 6.1.0, all versions starting from 6.2.1",
"package_slug": "nuget/NuGet.CommandLine",
"pubdate": "2022-06-14",
"solution": "Upgrade to versions 4.9.5, 5.2.1, 5.7.2, 5.9.2, 5.11.2, 6.0.2, 6.2.1 or above.",
"title": "Key Management Errors",
"urls": [
"https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-3885-8gqc-3wpf",
"https://github.com/advisories/GHSA-3885-8gqc-3wpf"
],
"uuid": "1d91f837-92a2-4b8c-9e85-f1c46e6c3b41"
},
{
"affected_range": "[3.5.0,4.9.5),[5.0.0,5.2.1),[5.3.0,5.7.2),[5.8.0,5.9.2),[5.10.0,5.11.2),[6.0.0,6.0.2),[6.1.0,6.2.1)",
"affected_versions": "All versions starting from 3.5.0 before 4.9.5, all versions starting from 5.0.0 before 5.2.1, all versions starting from 5.3.0 before 5.7.2, all versions starting from 5.8.0 before 5.9.2, all versions starting from 5.10.0 before 5.11.2, all versions starting from 6.0.0 before 6.0.2, all versions starting from 6.1.0 before 6.2.1",
"cwe_ids": [
"CWE-1035",
"CWE-937"
],
"date": "2022-06-14",
"description": "Potential leak of NuGet.org API key",
"fixed_versions": [
"4.9.5",
"5.2.1",
"5.7.2",
"5.9.2",
"5.11.2",
"6.0.2",
"6.2.1"
],
"identifier": "GMS-2022-2163",
"identifiers": [
"GHSA-3885-8gqc-3wpf",
"GMS-2022-2163",
"CVE-2022-30184"
],
"not_impacted": "All versions before 3.5.0, all versions starting from 4.9.5 before 5.0.0, all versions starting from 5.2.1 before 5.3.0, all versions starting from 5.7.2 before 5.8.0, all versions starting from 5.9.2 before 5.10.0, all versions starting from 5.11.2 before 6.0.0, all versions starting from 6.0.2 before 6.1.0, all versions starting from 6.2.1",
"package_slug": "nuget/NuGet.Commands",
"pubdate": "2022-06-14",
"solution": "Upgrade to versions 4.9.5, 5.2.1, 5.7.2, 5.9.2, 5.11.2, 6.0.2, 6.2.1 or above.",
"title": "Key Management Errors",
"urls": [
"https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-3885-8gqc-3wpf",
"https://github.com/advisories/GHSA-3885-8gqc-3wpf"
],
"uuid": "d407e4ec-9db4-44b7-b37c-db43f8ac2be2"
}
]
},
"nvd.nist.gov": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8095DD06-0E31-477D-97C8-8358D66E46A0",
"versionEndExcluding": "17.0.4",
"versionStartIncluding": "17.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net:6.0.0:-:*:*:*:*:*:*",
"matchCriteriaId": "1DE0C8DD-9C73-4876-8193-068F18074B58",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_core:3.1:-:*:*:*:*:*:*",
"matchCriteriaId": "70BE107E-20A0-4998-A8ED-BCC414C6BDBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4AD07BA6-1A4A-4F3E-AA52-08D822416159",
"versionEndExcluding": "6.2.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C9025CDD-C3BB-48FC-9E9D-486A6246B833",
"versionEndExcluding": "16.9.22",
"versionStartIncluding": "16.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
"matchCriteriaId": "08BF21BA-1D93-4402-9A4E-691000789125",
"versionEndExcluding": "16.11.6",
"versionStartIncluding": "16.10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:8.10:*:*:*:*:macos:*:*",
"matchCriteriaId": "BA547FFE-D557-4612-9840-EEE88ACF53AA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"matchCriteriaId": "474482B7-6211-4988-B77E-C1C8378B09C9",
"versionEndExcluding": "17.0.11",
"versionStartIncluding": "17.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F1E4B8BB-0B51-4F8E-8C94-72403EE73E24",
"versionEndExcluding": "17.2.5",
"versionStartIncluding": "17.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
"matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
"matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": ".NET and Visual Studio Information Disclosure Vulnerability"
},
{
"lang": "es",
"value": "Una Vulnerabilidad de Divulgaci\u00f3n de Informaci\u00f3n en .NET y Visual Studio"
}
],
"id": "CVE-2022-30184",
"lastModified": "2023-12-20T22:15:26.597",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "secure@microsoft.com",
"type": "Primary"
}
]
},
"published": "2022-06-15T22:15:15.370",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DMP34G53EA2DBTBLFOAQCDZRRENE2EA2/"
},
{
"source": "secure@microsoft.com",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWNH4AC3LFVX35MDRX5OBZDGD2AMH66K/"
},
{
"source": "secure@microsoft.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30184"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…