NetSight
high8.8

CVE-2021-43877

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Impact

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Affected products

VendorProductAffected versions
MicrosoftAsp.Net Core
Versions 3.1, 5.0, 6.0
MicrosoftVisual Studio 2019
Versions 16.7, 16.9, 16.11
MicrosoftVisual Studio 2022
Version 17.0
MicrosoftMicrosoft Visual Studio 2019 Version 16.7 (Includes 16.0 – 16.6)
from 16.0.0 before 16.7.23
MicrosoftMicrosoft Visual Studio 2019 Version 16.9 (Includes 16.0 - 16.8)
from 15.0.0 before 16.9.15
MicrosoftMicrosoft Visual Studio 2019 Version 16.11 (Includes 16.0 - 16.10)
from 16.11.0 before 16.11.8
MicrosoftMicrosoft Visual Studio 2022 Version 17.0
from 17.0.0 before 17.0.3
MicrosoftASP.NET Core 3.1
from 3.0 before 3.1.22
MicrosoftASP.NET Core 5.0
from 5.0 before 5.0.13
MicrosoftASP.NET Core 6.0
from 6.0 before 6.0.101
MicrosoftMicrosoft Visual Studio 2022 Version 17.1
from 17.0.0 before 17.1.4

References