gsd-2022-30184
Vulnerability from gsd
Modified
2023-12-13 01:19
Details
.NET and Visual Studio Information Disclosure Vulnerability.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2022-30184",
"description": ".NET and Visual Studio Information Disclosure Vulnerability.",
"id": "GSD-2022-30184",
"references": [
"https://linux.oracle.com/cve/CVE-2022-30184.html",
"https://access.redhat.com/errata/RHSA-2022:5046",
"https://access.redhat.com/errata/RHSA-2022:5047",
"https://access.redhat.com/errata/RHSA-2022:5050",
"https://access.redhat.com/errata/RHSA-2022:5061",
"https://access.redhat.com/errata/RHSA-2022:5062"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2022-30184"
],
"details": ".NET and Visual Studio Information Disclosure Vulnerability.",
"id": "GSD-2022-30184",
"modified": "2023-12-13T01:19:36.700470Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2022-30184",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": ".NET 6.0",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "6.0.0",
"version_value": "6.0.6"
}
]
}
},
{
"product_name": ".NET Core 3.1",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "3.1",
"version_value": "3.1.26"
}
]
}
},
{
"product_name": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "15.0.0",
"version_value": "16.9.22"
}
]
}
},
{
"product_name": "Visual Studio 2019 for Mac version 8.10",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "8.1.0",
"version_value": "17.0.2"
}
]
}
},
{
"product_name": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "16.11.0",
"version_value": "16.11.16"
}
]
}
},
{
"product_name": "Microsoft Visual Studio 2022 version 17.0",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "17.0.0",
"version_value": "17.0.11"
}
]
}
},
{
"product_name": "Microsoft Visual Studio 2022 version 17.2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "17.2.0",
"version_value": "17.2.4"
}
]
}
},
{
"product_name": "NuGet.exe",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "6.0.0",
"version_value": "6.2.0"
}
]
}
},
{
"product_name": "Visual Studio 2022 for Mac version 17.0",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "17.0.0",
"version_value": "17.0.2"
}
]
}
}
]
},
"vendor_name": "Microsoft"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": ".NET and Visual Studio Information Disclosure Vulnerability"
}
]
},
"impact": {
"cvss": [
{
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Information Disclosure"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30184",
"refsource": "MISC",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30184"
},
{
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWNH4AC3LFVX35MDRX5OBZDGD2AMH66K/",
"refsource": "MISC",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWNH4AC3LFVX35MDRX5OBZDGD2AMH66K/"
},
{
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DMP34G53EA2DBTBLFOAQCDZRRENE2EA2/",
"refsource": "MISC",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DMP34G53EA2DBTBLFOAQCDZRRENE2EA2/"
}
]
}
},
"gitlab.com": {
"advisories": [
{
"affected_range": "[3.5.0,4.9.5),[5.0.0,5.2.1),[5.3.0,5.7.2),[5.8.0,5.9.2),[5.10.0,5.11.2),[6.0.0,6.0.2),[6.1.0,6.2.1)",
"affected_versions": "All versions starting from 3.5.0 before 4.9.5, all versions starting from 5.0.0 before 5.2.1, all versions starting from 5.3.0 before 5.7.2, all versions starting from 5.8.0 before 5.9.2, all versions starting from 5.10.0 before 5.11.2, all versions starting from 6.0.0 before 6.0.2, all versions starting from 6.1.0 before 6.2.1",
"cwe_ids": [
"CWE-1035",
"CWE-937"
],
"date": "2022-06-14",
"description": "Potential leak of NuGet.org API key",
"fixed_versions": [
"4.9.5",
"5.2.1",
"5.7.2",
"5.9.2",
"5.11.2",
"6.0.2",
"6.2.1"
],
"identifier": "GMS-2022-2162",
"identifiers": [
"GHSA-3885-8gqc-3wpf",
"GMS-2022-2162",
"CVE-2022-30184"
],
"not_impacted": "All versions before 3.5.0, all versions starting from 4.9.5 before 5.0.0, all versions starting from 5.2.1 before 5.3.0, all versions starting from 5.7.2 before 5.8.0, all versions starting from 5.9.2 before 5.10.0, all versions starting from 5.11.2 before 6.0.0, all versions starting from 6.0.2 before 6.1.0, all versions starting from 6.2.1",
"package_slug": "nuget/NuGet.CommandLine.XPlat",
"pubdate": "2022-06-14",
"solution": "Upgrade to versions 4.9.5, 5.2.1, 5.7.2, 5.9.2, 5.11.2, 6.0.2, 6.2.1 or above.",
"title": "Key Management Errors",
"urls": [
"https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-3885-8gqc-3wpf",
"https://github.com/advisories/GHSA-3885-8gqc-3wpf"
],
"uuid": "b577caaa-8a8f-4391-94c5-a211ae3183fb"
},
{
"affected_range": "[3.5.0,4.9.5),[5.0.0,5.2.1),[5.3.0,5.7.2),[5.8.0,5.9.2),[5.10.0,5.11.2),[6.0.0,6.0.2),[6.1.0,6.2.1)",
"affected_versions": "All versions starting from 3.5.0 before 4.9.5, all versions starting from 5.0.0 before 5.2.1, all versions starting from 5.3.0 before 5.7.2, all versions starting from 5.8.0 before 5.9.2, all versions starting from 5.10.0 before 5.11.2, all versions starting from 6.0.0 before 6.0.2, all versions starting from 6.1.0 before 6.2.1",
"cwe_ids": [
"CWE-1035",
"CWE-937"
],
"date": "2022-06-14",
"description": "Potential leak of NuGet.org API key",
"fixed_versions": [
"4.9.5",
"5.2.1",
"5.7.2",
"5.9.2",
"5.11.2",
"6.0.2",
"6.2.1"
],
"identifier": "GMS-2022-2161",
"identifiers": [
"GHSA-3885-8gqc-3wpf",
"GMS-2022-2161",
"CVE-2022-30184"
],
"not_impacted": "All versions before 3.5.0, all versions starting from 4.9.5 before 5.0.0, all versions starting from 5.2.1 before 5.3.0, all versions starting from 5.7.2 before 5.8.0, all versions starting from 5.9.2 before 5.10.0, all versions starting from 5.11.2 before 6.0.0, all versions starting from 6.0.2 before 6.1.0, all versions starting from 6.2.1",
"package_slug": "nuget/NuGet.CommandLine",
"pubdate": "2022-06-14",
"solution": "Upgrade to versions 4.9.5, 5.2.1, 5.7.2, 5.9.2, 5.11.2, 6.0.2, 6.2.1 or above.",
"title": "Key Management Errors",
"urls": [
"https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-3885-8gqc-3wpf",
"https://github.com/advisories/GHSA-3885-8gqc-3wpf"
],
"uuid": "1d91f837-92a2-4b8c-9e85-f1c46e6c3b41"
},
{
"affected_range": "[3.5.0,4.9.5),[5.0.0,5.2.1),[5.3.0,5.7.2),[5.8.0,5.9.2),[5.10.0,5.11.2),[6.0.0,6.0.2),[6.1.0,6.2.1)",
"affected_versions": "All versions starting from 3.5.0 before 4.9.5, all versions starting from 5.0.0 before 5.2.1, all versions starting from 5.3.0 before 5.7.2, all versions starting from 5.8.0 before 5.9.2, all versions starting from 5.10.0 before 5.11.2, all versions starting from 6.0.0 before 6.0.2, all versions starting from 6.1.0 before 6.2.1",
"cwe_ids": [
"CWE-1035",
"CWE-937"
],
"date": "2022-06-14",
"description": "Potential leak of NuGet.org API key",
"fixed_versions": [
"4.9.5",
"5.2.1",
"5.7.2",
"5.9.2",
"5.11.2",
"6.0.2",
"6.2.1"
],
"identifier": "GMS-2022-2163",
"identifiers": [
"GHSA-3885-8gqc-3wpf",
"GMS-2022-2163",
"CVE-2022-30184"
],
"not_impacted": "All versions before 3.5.0, all versions starting from 4.9.5 before 5.0.0, all versions starting from 5.2.1 before 5.3.0, all versions starting from 5.7.2 before 5.8.0, all versions starting from 5.9.2 before 5.10.0, all versions starting from 5.11.2 before 6.0.0, all versions starting from 6.0.2 before 6.1.0, all versions starting from 6.2.1",
"package_slug": "nuget/NuGet.Commands",
"pubdate": "2022-06-14",
"solution": "Upgrade to versions 4.9.5, 5.2.1, 5.7.2, 5.9.2, 5.11.2, 6.0.2, 6.2.1 or above.",
"title": "Key Management Errors",
"urls": [
"https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-3885-8gqc-3wpf",
"https://github.com/advisories/GHSA-3885-8gqc-3wpf"
],
"uuid": "d407e4ec-9db4-44b7-b37c-db43f8ac2be2"
}
]
},
"nvd.nist.gov": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8095DD06-0E31-477D-97C8-8358D66E46A0",
"versionEndExcluding": "17.0.4",
"versionStartIncluding": "17.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net:6.0.0:-:*:*:*:*:*:*",
"matchCriteriaId": "1DE0C8DD-9C73-4876-8193-068F18074B58",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_core:3.1:-:*:*:*:*:*:*",
"matchCriteriaId": "70BE107E-20A0-4998-A8ED-BCC414C6BDBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4AD07BA6-1A4A-4F3E-AA52-08D822416159",
"versionEndExcluding": "6.2.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C9025CDD-C3BB-48FC-9E9D-486A6246B833",
"versionEndExcluding": "16.9.22",
"versionStartIncluding": "16.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
"matchCriteriaId": "08BF21BA-1D93-4402-9A4E-691000789125",
"versionEndExcluding": "16.11.6",
"versionStartIncluding": "16.10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2019:8.10:*:*:*:*:macos:*:*",
"matchCriteriaId": "BA547FFE-D557-4612-9840-EEE88ACF53AA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"matchCriteriaId": "474482B7-6211-4988-B77E-C1C8378B09C9",
"versionEndExcluding": "17.0.11",
"versionStartIncluding": "17.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F1E4B8BB-0B51-4F8E-8C94-72403EE73E24",
"versionEndExcluding": "17.2.5",
"versionStartIncluding": "17.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
"matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
"matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": ".NET and Visual Studio Information Disclosure Vulnerability"
},
{
"lang": "es",
"value": "Una Vulnerabilidad de Divulgaci\u00f3n de Informaci\u00f3n en .NET y Visual Studio"
}
],
"id": "CVE-2022-30184",
"lastModified": "2023-12-20T22:15:26.597",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "secure@microsoft.com",
"type": "Primary"
}
]
},
"published": "2022-06-15T22:15:15.370",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DMP34G53EA2DBTBLFOAQCDZRRENE2EA2/"
},
{
"source": "secure@microsoft.com",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWNH4AC3LFVX35MDRX5OBZDGD2AMH66K/"
},
{
"source": "secure@microsoft.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30184"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.