Vulnerabilites related to Microsoft - .NET Install Tool for Extension Authors
CVE-2021-34477 (GCVE-0-2021-34477)
Vulnerability from cvelistv5
Published
2021-07-14 17:54
Modified
2024-08-04 00:12
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Elevation of Privilege
Summary
Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability
References
▼ | URL | Tags |
---|---|---|
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34477 | x_refsource_MISC |
Impacted products
Vendor | Product | Version | |||||||
---|---|---|---|---|---|---|---|---|---|
▼ | Microsoft | .NET Education Bundle SDK Install Tool |
Version: 0.0.0 < 1.2.0 cpe:2.3:a:microsoft:.net_education_bundle_sdk_install_tool:*:*:*:*:*:visual_studio_code:*:* |
||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T00:12:50.416Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34477" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "cpes": [ "cpe:2.3:a:microsoft:.net_education_bundle_sdk_install_tool:*:*:*:*:*:visual_studio_code:*:*" ], "platforms": [ "Unknown" ], "product": ".NET Education Bundle SDK Install Tool", "vendor": "Microsoft", "versions": [ { "lessThan": "1.2.0", "status": "affected", "version": "0.0.0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:a:microsoft:.net_install_tool_for_extension_authors:*:*:*:*:*:visual_studio_code:*:*" ], "platforms": [ "Unknown" ], "product": ".NET Install Tool for Extension Authors", "vendor": "Microsoft", "versions": [ { "lessThan": "0.7.0", "status": "affected", "version": "1.0.0", "versionType": "custom" } ] } ], "datePublic": "2021-07-13T07:00:00+00:00", "descriptions": [ { "lang": "en-US", "value": "Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability" } ], "metrics": [ { "cvssV3_1": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en-US", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "description": "Elevation of Privilege", "lang": "en-US", "type": "Impact" } ] } ], "providerMetadata": { "dateUpdated": "2023-12-28T22:37:18.307Z", "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34477" } ], "title": "Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability" } }, "cveMetadata": { "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "assignerShortName": "microsoft", "cveId": "CVE-2021-34477", "datePublished": "2021-07-14T17:54:06", "dateReserved": "2021-06-09T00:00:00", "dateUpdated": "2024-08-04T00:12:50.416Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }