CVE-2021-41355

lowpriority · track · 19OT risk · elevatedEPSS 0.203 · 97 %ileEURUUS

grimoire priorityP1 · Urgent

Exploitable?

—

no known exploitation

Likely / severe?

20.3% (97th) EPSS

CVSS 2.9 · low

Is it mine?

76 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-23

.NET Core and Visual Studio Information Disclosure Vulnerability

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedrh-dotnet50-aspnetcore-runtime-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-aspnetcore-runtime-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-aspnetcore-runtime-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-0:5.0.208-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-0:5.0.208-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-0:5.0.208-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-debuginfo-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-debuginfo-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-debuginfo-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-host-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-host-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-host-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-hostfxr-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-hostfxr-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-hostfxr-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-runtime-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-runtime-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-runtime-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-sdk-5.0-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-sdk-5.0-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-sdk-5.0-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.11-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-templates-5.0-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-templates-5.0-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-dotnet-templates-5.0-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedrh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.208-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3818
Fixedaspnetcore-runtime-5.0-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixedaspnetcore-targeting-pack-5.0-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-0:5.0.208-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-apphost-pack-5.0-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-apphost-pack-5.0-debuginfo-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-host-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-host-debuginfo-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-hostfxr-5.0-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-hostfxr-5.0-debuginfo-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-runtime-5.0-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-runtime-5.0-debuginfo-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-sdk-5.0-0:5.0.208-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-sdk-5.0-debuginfo-0:5.0.208-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-targeting-pack-5.0-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet-templates-5.0-0:5.0.208-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet5.0-0:5.0.208-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet5.0-debuginfo-0:5.0.208-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixeddotnet5.0-debugsource-0:5.0.208-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819
Fixednetstandard-targeting-pack-2.1-0:5.0.208-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3819

cvss

Technical severity, 0–10. One row per scoring source.

5.7

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.5–5.7

v2.02.9lowAV:A/AC:M/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 5.5 · impact 2.9

v2.02.5lowAV:A/AC:M/Au:N/C:P/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.15.7mediumAV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.15.7mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:Csecondary · ENISA EU

v3.15.7mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:Nsecondary · secure@microsoft.com USexploitability 2.1 · impact 3.6

v3.15.7mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:Nsecondary · OSV

v3.15.7mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:Nsecondary · Red Hat Product Security US

v3.15.7mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:Nsecondary · NVD / NIST USexploitability 2.1 · impact 3.6

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USCWE-200USCWE-319US

affected products (76)

Products and version ranges known to be affected.

Microsoft .NET 5.05.0.0 → 5.0.11enisa_euvdEU
Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)16.11.0 → 16.11.5enisa_euvdEU
Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)15.0.0 → 16.9.12enisa_euvdEU
Microsoft PowerShell 7.17.1.0 → 7.1.5enisa_euvdEU
Microsoft Corp .NET≤ 5.0fstec_bduRU
Microsoft Corp Microsoft Visual Studio 201916.0 → 16.8fstec_bduRU
Microsoft Corp Microsoft Visual Studio 201916.0 → 16.10fstec_bduRU
Microsoft Corp PowerShell≤ 7.1fstec_bduRU
microsoft .net= 5.0nvdUScpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
microsoft powershell7.1 → 7.1.5nvdUScpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*
microsoft visual studio 201916.0 → 16.11nvdUScpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
Bitnami dotnet5.0.0 → 5.0.1osvUSpkg:bitnami/dotnet
Bitnami dotnet-sdk5.0.0 → 5.0.1osvUSpkg:bitnami/dotnet-sdk
Bitnami powershell7.1.0 → 7.1.5osvUSpkg:bitnami/powershell
NuGet System.DirectoryServices.Protocols< 5.0.1osvUSpkg:nuget/System.DirectoryServices.Protocols
aspnetcore-runtime-5.0-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)all versionsfixedredhat_csafUS
aspnetcore-targeting-pack-5.0-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)all versionsfixedredhat_csafUS
dotnet-0:5.0.208-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)all versionsfixedredhat_csafUS
dotnet-apphost-pack-5.0-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)all versionsfixedredhat_csafUS
dotnet-apphost-pack-5.0-debuginfo-0:5.0.11-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)all versionsfixedredhat_csafUS

showing 20 of 76

advisories (6)

Vendor and ecosystem advisories describing this.

RHSA-2021:3818Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update2021-10-12csaf · redhat_csafUS
An update for rh-dotnet50-dotnet is now available for .NET on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2021:3819Red Hat Security Advisory: .NET 5.0 security and bugfix update2021-10-12csaf · redhat_csafUS
An update for .NET 5.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
GHSA-9cxh-gqpx-qc5mCredential Disclosure in System.DirectoryServices.Protocols2021-10-12ghsa · osvUS
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A Information Disclosure vulnerability exists in .NET where System.DirectoryServices.Protocols.LdapConnection may send credentials in plain text on Linux. ### Patches Any .NET application that uses `System.DirectoryServices.Protocols` with a vulnerable version listed below on system based on Linux. Package name | Vulnerable versions | Secure versions ------------ | ---------------- | ------------------------- System.DirectoryServices.Protocols | 5.0.0 | 5.0.1 ### Other Details - Announcement for this issue can be found at dotnet/announcements#202 - An Issue for this can be found at https://github.com/dotnet/runtime/issues/60301 - MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-41355
BIT-dotnet-2021-41355.NET Core and Visual Studio Information Disclosure Vulnerability2024-03-06vendor · osvUS
.NET Core and Visual Studio Information Disclosure Vulnerability
BIT-dotnet-sdk-2021-41355.NET Core and Visual Studio Information Disclosure Vulnerability2024-03-06vendor · osvUS
.NET Core and Visual Studio Information Disclosure Vulnerability
BIT-powershell-2021-41355.NET Core and Visual Studio Information Disclosure Vulnerability2025-09-04vendor · osvUS
.NET Core and Visual Studio Information Disclosure Vulnerability

also known as (8)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv nvd redhat_csaf NVD CVE.org MITRE

published 2021-10-13modified 2026-06-17

references (14)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan