{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": ".NET Core 3.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": ".NET 5.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-31204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31204"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-368",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-05-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eMicrosoft\n.Net\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de\nprivil\u00e8ges.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Microsoft .Net",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 11 mai 2021",
      "url": "https://portal.msrc.microsoft.com/fr-FR/security-guidance"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Exchange Server 2013 Cumulative Update 23",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Skype pour Business Server 2019 CU5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.7 (includes 16.0 \u2013 16.6)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2016 Cumulative Update 19",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Dynamics 365 pour Finance and Operations",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2019 Cumulative Update 8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "common_utils.py",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio Code",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft 365 Apps pour Enterprise pour syst\u00e8mes 32 bits",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft 365 Apps pour Enterprise pour 64 bits Systems",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Skype pour Business Server 2015 CU11",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2016 Cumulative Update 20",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2019 Cumulative Update 9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio 2019 pour Mac version 8.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Lync Server 2013 CU10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio Code Remote - Containers Extension",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Web Media Extensions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-26421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26421"
    },
    {
      "name": "CVE-2021-28465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28465"
    },
    {
      "name": "CVE-2021-31195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31195"
    },
    {
      "name": "CVE-2021-27068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27068"
    },
    {
      "name": "CVE-2021-31176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31176"
    },
    {
      "name": "CVE-2021-31198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31198"
    },
    {
      "name": "CVE-2021-28455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28455"
    },
    {
      "name": "CVE-2021-31211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31211"
    },
    {
      "name": "CVE-2021-31213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31213"
    },
    {
      "name": "CVE-2021-31200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31200"
    },
    {
      "name": "CVE-2021-31179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31179"
    },
    {
      "name": "CVE-2021-31207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31207"
    },
    {
      "name": "CVE-2021-31180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31180"
    },
    {
      "name": "CVE-2021-31174",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31174"
    },
    {
      "name": "CVE-2021-26422",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26422"
    },
    {
      "name": "CVE-2021-31209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31209"
    },
    {
      "name": "CVE-2021-31214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31214"
    },
    {
      "name": "CVE-2021-31178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31178"
    },
    {
      "name": "CVE-2021-31204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31204"
    },
    {
      "name": "CVE-2021-28461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28461"
    },
    {
      "name": "CVE-2021-31175",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31175"
    },
    {
      "name": "CVE-2021-31177",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31177"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-369",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-05-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Usurpation d\u0027identit\u00e9"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eles produits Microsoft\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une ex\u00e9cution de\ncode \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une\nusurpation d\u0027identit\u00e9 et un contournement de la fonctionnalit\u00e9 de\ns\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 11 mai 2021",
      "url": "https://portal.msrc.microsoft.com/fr-FR/security-guidance"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": ".NET Core 3.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": ".NET 5.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-31204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31204"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-368",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-05-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan class=\"textit\"\u003eMicrosoft\n.Net\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de\nprivil\u00e8ges.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Microsoft .Net",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 11 mai 2021",
      "url": "https://portal.msrc.microsoft.com/fr-FR/security-guidance"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Exchange Server 2013 Cumulative Update 23",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Skype pour Business Server 2019 CU5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.7 (includes 16.0 \u2013 16.6)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2016 Cumulative Update 19",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Dynamics 365 pour Finance and Operations",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2019 Cumulative Update 8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "common_utils.py",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio Code",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft 365 Apps pour Enterprise pour syst\u00e8mes 32 bits",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft 365 Apps pour Enterprise pour 64 bits Systems",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Skype pour Business Server 2015 CU11",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2016 Cumulative Update 20",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Exchange Server 2019 Cumulative Update 9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio 2019 pour Mac version 8.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Lync Server 2013 CU10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio Code Remote - Containers Extension",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Web Media Extensions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-26421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26421"
    },
    {
      "name": "CVE-2021-28465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28465"
    },
    {
      "name": "CVE-2021-31195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31195"
    },
    {
      "name": "CVE-2021-27068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27068"
    },
    {
      "name": "CVE-2021-31176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31176"
    },
    {
      "name": "CVE-2021-31198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31198"
    },
    {
      "name": "CVE-2021-28455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28455"
    },
    {
      "name": "CVE-2021-31211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31211"
    },
    {
      "name": "CVE-2021-31213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31213"
    },
    {
      "name": "CVE-2021-31200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31200"
    },
    {
      "name": "CVE-2021-31179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31179"
    },
    {
      "name": "CVE-2021-31207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31207"
    },
    {
      "name": "CVE-2021-31180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31180"
    },
    {
      "name": "CVE-2021-31174",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31174"
    },
    {
      "name": "CVE-2021-26422",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26422"
    },
    {
      "name": "CVE-2021-31209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31209"
    },
    {
      "name": "CVE-2021-31214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31214"
    },
    {
      "name": "CVE-2021-31178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31178"
    },
    {
      "name": "CVE-2021-31204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31204"
    },
    {
      "name": "CVE-2021-28461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28461"
    },
    {
      "name": "CVE-2021-31175",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31175"
    },
    {
      "name": "CVE-2021-31177",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31177"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-369",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-05-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Usurpation d\u0027identit\u00e9"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eles produits Microsoft\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une ex\u00e9cution de\ncode \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une\nusurpation d\u0027identit\u00e9 et un contournement de la fonctionnalit\u00e9 de\ns\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 11 mai 2021",
      "url": "https://portal.msrc.microsoft.com/fr-FR/security-guidance"
    }
  ]
}

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO708, TO711, TO712, TO714, TO716",
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO708 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Visual Studio 2019 16.11.30, TO711 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Visual Studio 2019 16.4.27, TO712 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Visual Studio 2019 16.7.27, TO714 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Visual Studio 2019 16.9.26, TO716 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Visual Studio 2019 16.11.21",
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "3.1 (.NET Core), \u043e\u0442 16.0 \u0434\u043e 16.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Microsoft Visual Studio 2019), \u043e\u0442 16.0 \u0434\u043e 16.6 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Microsoft Visual Studio 2019), \u043e\u0442 16.0 \u0434\u043e 16.8 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Microsoft Visual Studio 2019), 8.9 (Microsoft Visual Studio 2019), - (Microsoft .NET Framework 5.0)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31204",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "11.05.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "24.05.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "24.05.2021",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2021-02646",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-31204",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": ".NET Core, Microsoft Visual Studio 2019, Microsoft .NET Framework 5.0",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Microsoft .NET Framework \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Microsoft Visual Studio, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (CWE-264)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Microsoft .NET Framework \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Microsoft Visual Studio \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31204\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-31204\nhttps://www.cybersecurity-help.cz/vdb/SB2021051141",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-264",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-31204"
    }
  },
  "description": "Microsoft Visual Studio\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u5f00\u53d1\u5de5\u5177\u5957\u4ef6\u7cfb\u5217\u4ea7\u54c1\uff0c\u4e5f\u662f\u4e00\u4e2a\u57fa\u672c\u5b8c\u6574\u7684\u5f00\u53d1\u5de5\u5177\u96c6\uff0c\u5b83\u5305\u62ec\u4e86\u6574\u4e2a\u8f6f\u4ef6\u751f\u547d\u5468\u671f\u4e2d\u6240\u9700\u8981\u7684\u5927\u90e8\u5206\u5de5\u5177\u3002\n\nMicrosoft .NET\u548cVisual Studio\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-37598",
  "openTime": "2021-05-28",
  "patchDescription": "Microsoft Visual Studio\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u5f00\u53d1\u5de5\u5177\u5957\u4ef6\u7cfb\u5217\u4ea7\u54c1\uff0c\u4e5f\u662f\u4e00\u4e2a\u57fa\u672c\u5b8c\u6574\u7684\u5f00\u53d1\u5de5\u5177\u96c6\uff0c\u5b83\u5305\u62ec\u4e86\u6574\u4e2a\u8f6f\u4ef6\u751f\u547d\u5468\u671f\u4e2d\u6240\u9700\u8981\u7684\u5927\u90e8\u5206\u5de5\u5177\u3002\r\n\r\nMicrosoft .NET\u548cVisual Studio\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft .NET\u548cVisual Studio\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft Visual Studio 2019 16.4",
      "Microsoft Visual Studio 2019 16.7",
      "Microsoft Visual Studio 2019 16.9",
      "Microsoft Visual Studio 2019 for Mac 8.9",
      "Microsoft .NET 5.0",
      "Microsoft .NET Core 3.1"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-31204",
  "serverity": "\u4e2d",
  "submitTime": "2021-05-14",
  "title": "Microsoft .NET\u548cVisual Studio\u6743\u9650\u63d0\u5347\u6f0f\u6d1e"
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "954DB6AC-B6A8-4FF1-A60C-6531FB2D7C55",
              "versionEndIncluding": "5.0.5",
              "versionStartIncluding": "5.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1FBEF1B-5F64-4665-9AD5-3A8CD1ECE92A",
              "versionEndIncluding": "3.1.14",
              "versionStartIncluding": "3.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "45AADF74-7D19-4262-887F-EF8527B3D1C9",
              "versionEndExcluding": "16.4.22",
              "versionStartIncluding": "16.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F72FE4AE-BD01-4D58-A5C6-E4480CE65643",
              "versionEndExcluding": "16.7.15",
              "versionStartIncluding": "16.5.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D40BD6DF-6594-4FBB-8B6F-36F4E1809E8B",
              "versionEndExcluding": "16.9.5",
              "versionStartIncluding": "16.8.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:8.9:*:*:*:*:macos:*:*",
              "matchCriteriaId": "D6AD9B85-5106-4D1D-B32A-0585F3E89DF5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
              "matchCriteriaId": "36D96259-24BD-44E2-96D9-78CE1D41F956",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
              "matchCriteriaId": "E460AA51-FCDA-46B9-AE97-E6676AA5E194",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
              "matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": ".NET and Visual Studio Elevation of Privilege Vulnerability"
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de Escalada de Privilegios de .NET y Visual Studio"
    }
  ],
  "id": "CVE-2021-31204",
  "lastModified": "2024-11-21T06:05:17.833",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.3,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.3,
        "impactScore": 5.9,
        "source": "secure@microsoft.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Secondary"
      }
    ]
  },
  "published": "2021-05-11T19:15:10.327",
  "references": [
    {
      "source": "secure@microsoft.com",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/"
    },
    {
      "source": "secure@microsoft.com",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/"
    },
    {
      "source": "secure@microsoft.com",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/"
    },
    {
      "source": "secure@microsoft.com",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/"
    },
    {
      "source": "secure@microsoft.com",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/"
    },
    {
      "source": "secure@microsoft.com",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/"
    },
    {
      "source": "secure@microsoft.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2021-31204",
    "description": ".NET and Visual Studio Elevation of Privilege Vulnerability",
    "id": "GSD-2021-31204",
    "references": [
      "https://access.redhat.com/errata/RHSA-2021:2037",
      "https://access.redhat.com/errata/RHSA-2021:2036",
      "https://access.redhat.com/errata/RHSA-2021:1547",
      "https://access.redhat.com/errata/RHSA-2021:1546",
      "https://security.archlinux.org/CVE-2021-31204",
      "https://linux.oracle.com/cve/CVE-2021-31204.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2021-31204"
      ],
      "details": ".NET and Visual Studio Elevation of Privilege Vulnerability",
      "id": "GSD-2021-31204",
      "modified": "2023-12-13T01:23:13.674211Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2021-31204",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": ".NET Core 3.1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "3.1",
                          "version_value": "3.1.15-servicing.21214.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": ".NET 5.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "5.0.0",
                          "version_value": "5.0.6-servicing.21220.11"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "15.0.0",
                          "version_value": "publication"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "16.0",
                          "version_value": "publication"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.7 (includes 16.0 \u2013 16.6)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "16.0.0",
                          "version_value": "publication"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Visual Studio 2019 for Mac version 8.9",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "8.0",
                          "version_value": "publication"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Microsoft"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": ".NET and Visual Studio Elevation of Privilege Vulnerability"
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Elevation of Privilege"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204",
            "refsource": "MISC",
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/"
          },
          {
            "name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/",
            "refsource": "MISC",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "954DB6AC-B6A8-4FF1-A60C-6531FB2D7C55",
                    "versionEndIncluding": "5.0.5",
                    "versionStartIncluding": "5.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E1FBEF1B-5F64-4665-9AD5-3A8CD1ECE92A",
                    "versionEndIncluding": "3.1.14",
                    "versionStartIncluding": "3.1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "45AADF74-7D19-4262-887F-EF8527B3D1C9",
                    "versionEndExcluding": "16.4.22",
                    "versionStartIncluding": "16.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F72FE4AE-BD01-4D58-A5C6-E4480CE65643",
                    "versionEndExcluding": "16.7.15",
                    "versionStartIncluding": "16.5.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D40BD6DF-6594-4FBB-8B6F-36F4E1809E8B",
                    "versionEndExcluding": "16.9.5",
                    "versionStartIncluding": "16.8.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:8.9:*:*:*:*:macos:*:*",
                    "matchCriteriaId": "D6AD9B85-5106-4D1D-B32A-0585F3E89DF5",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
                    "matchCriteriaId": "36D96259-24BD-44E2-96D9-78CE1D41F956",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E460AA51-FCDA-46B9-AE97-E6676AA5E194",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": ".NET and Visual Studio Elevation of Privilege Vulnerability"
          },
          {
            "lang": "es",
            "value": "Una vulnerabilidad de Escalada de Privilegios de .NET y Visual Studio"
          }
        ],
        "id": "CVE-2021-31204",
        "lastModified": "2023-12-29T00:15:49.127",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 4.6,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.3,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.3,
              "impactScore": 5.9,
              "source": "secure@microsoft.com",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Secondary"
            }
          ]
        },
        "published": "2021-05-11T19:15:10.327",
        "references": [
          {
            "source": "secure@microsoft.com",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/"
          },
          {
            "source": "secure@microsoft.com",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/"
          },
          {
            "source": "secure@microsoft.com",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/"
          },
          {
            "source": "secure@microsoft.com",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/"
          },
          {
            "source": "secure@microsoft.com",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/"
          },
          {
            "source": "secure@microsoft.com",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/"
          },
          {
            "source": "secure@microsoft.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204"
          }
        ],
        "sourceIdentifier": "secure@microsoft.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-dotnet50-dotnet is now available for .NET on Red Hat Enterprise Linux.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 5.0.203 and .NET Runtime 5.0.6.\n\nSecurity Fix(es):\n\n* dotnet: .NET Core single-file application privilege escalation (CVE-2021-31204)\n\nIn order for the update to be complete, self-contained applications deployed using previous versions need to be recompiled and redeployed.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2021:1546",
        "url": "https://access.redhat.com/errata/RHSA-2021:1546"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1956815",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1956815"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1546.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET 5.0 on Red Hat Enterprise Linux security and bugfix update",
    "tracking": {
      "current_release_date": "2025-11-21T18:21:58+00:00",
      "generator": {
        "date": "2025-11-21T18:21:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2021:1546",
      "initial_release_date": "2021-05-12T08:36:56+00:00",
      "revision_history": [
        {
          "date": "2021-05-12T08:36:56+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2021-05-12T08:36:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T18:21:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                  "product_id": "7ComputeNode-dotNET-5.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:5.0::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-dotNET-5.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:5.0::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-dotNET-5.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:5.0::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": ".NET Core on Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-aspnetcore-runtime-5.0@5.0.6-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-aspnetcore-targeting-pack-5.0@5.0.6-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet@5.0.203-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-apphost-pack-5.0@5.0.6-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-host@5.0.6-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-hostfxr-5.0@5.0.6-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-runtime-5.0@5.0.6-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-sdk-5.0@5.0.203-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-targeting-pack-5.0@5.0.6-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-templates-5.0@5.0.203-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-netstandard-targeting-pack-2.1@5.0.203-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-debuginfo@5.0.203-1.el7_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
                "product": {
                  "name": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
                  "product_id": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet@5.0.203-1.el7_9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-31204",
      "cwe": {
        "id": "CWE-273",
        "name": "Improper Check for Dropped Privileges"
      },
      "discovery_date": "2021-05-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1956815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet. A .NET Core single-file application running with elevated permissions could allow an attacker to gain elevated privileges. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: .NET Core single-file application privilege escalation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-31204"
        },
        {
          "category": "external",
          "summary": "RHBZ#1956815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1956815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-31204",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-31204"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-31204",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31204"
        },
        {
          "category": "external",
          "summary": "https://github.com/dotnet/announcements/issues/185",
          "url": "https://github.com/dotnet/announcements/issues/185"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31204",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31204"
        }
      ],
      "release_date": "2021-05-11T16:59:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-05-12T08:36:56+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:1546"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.203-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.203-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.203-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.6-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.203-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.203-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: .NET Core single-file application privilege escalation"
    }
  ]
}