CVE-2018-8292 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-8292 Interim 1 12 2023-01-19T02:02:17Z current 2021-05-30T14:11:51Z 2023-01-19T02:02:17Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-8292 An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES for SAP Applications 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Software Development Kit 11 SP4 bytefx-data-mysql mono-core mono-data mono-data-firebird mono-data-oracle mono-data-postgresql mono-data-sqlite mono-data-sybase mono-devel mono-extras mono-jscript mono-locale-extras mono-nunit mono-wcf mono-web mono-winforms mono-winfxcore monodoc-core mono-core as a component of SLES for SAP Applications 11 SP3 mono-core as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata mono-core as a component of SUSE Linux Enterprise Server 11 SP3 LTSS mono-core as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata mono-core as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mono-data as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mono-data-postgresql as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mono-data-sqlite as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mono-locale-extras as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mono-nunit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mono-web as a component of SUSE Linux Enterprise Server 11 SP4-LTSS mono-winforms as a component of SUSE Linux Enterprise Server 11 SP4-LTSS bytefx-data-mysql as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-core as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-firebird as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-oracle as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-postgresql as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-sqlite as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-sybase as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-extras as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-jscript as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-locale-extras as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-nunit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-wcf as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-web as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-winforms as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-winfxcore as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 monodoc-core as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0. CVE-2018-8292 SLES for SAP Applications 11 SP3:mono-core SUSE Linux Enterprise Server 11 SP1 for Teradata:mono-core SUSE Linux Enterprise Server 11 SP3 LTSS:mono-core SUSE Linux Enterprise Server 11 SP3 for Teradata:mono-core SUSE Linux Enterprise Server 11 SP4-LTSS:mono-core SUSE Linux Enterprise Server 11 SP4-LTSS:mono-data SUSE Linux Enterprise Server 11 SP4-LTSS:mono-data-postgresql SUSE Linux Enterprise Server 11 SP4-LTSS:mono-data-sqlite SUSE Linux Enterprise Server 11 SP4-LTSS:mono-locale-extras SUSE Linux Enterprise Server 11 SP4-LTSS:mono-nunit SUSE Linux Enterprise Server 11 SP4-LTSS:mono-web SUSE Linux Enterprise Server 11 SP4-LTSS:mono-winforms SUSE Linux Enterprise Software Development Kit 11 SP4:bytefx-data-mysql SUSE Linux Enterprise Software Development Kit 11 SP4:mono-core SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-firebird SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-oracle SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-postgresql SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-sqlite SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-sybase SUSE Linux Enterprise Software Development Kit 11 SP4:mono-devel SUSE Linux Enterprise Software Development Kit 11 SP4:mono-extras SUSE Linux Enterprise Software Development Kit 11 SP4:mono-jscript SUSE Linux Enterprise Software Development Kit 11 SP4:mono-locale-extras SUSE Linux Enterprise Software Development Kit 11 SP4:mono-nunit SUSE Linux Enterprise Software Development Kit 11 SP4:mono-wcf SUSE Linux Enterprise Software Development Kit 11 SP4:mono-web SUSE Linux Enterprise Software Development Kit 11 SP4:mono-winforms SUSE Linux Enterprise Software Development Kit 11 SP4:mono-winfxcore SUSE Linux Enterprise Software Development Kit 11 SP4:monodoc-core moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N