Skip to content
OpenAdvisories
High RHSA-2018:2902 1 CVE

Red Hat Security Advisory: .NET Core on Red Hat Enterprise Linux security update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Rhel Dotnet 1 rhel_dotnet:1.0::el7 rh-dotnetcore10-dotnetcore 0:1.0.13-1.el7
Red Hat · Rhel Dotnet 1 rhel_dotnet:1.0::el7 rh-dotnetcore10-dotnetcore-debuginfo 0:1.0.13-1.el7
Red Hat · Rhel Dotnet 1 rhel_dotnet:1.1::el7 rh-dotnetcore11-dotnetcore 0:1.1.10-1.el7
Red Hat · Rhel Dotnet 1 rhel_dotnet:1.1::el7 rh-dotnetcore11-dotnetcore-debuginfo 0:1.1.10-1.el7

Vulnerabilities 1

  • High 7.5
    CVE-2018-8292 EPSS 15%

    .NET Core Information Disclosure

    An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core…

    Microsoft .NET Core PowerShell Core System.Net.Http NuGet

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://github.com/dotnet/announcements/issues/88
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1636274
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2902.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-8292
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-8292
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-8292