Permissions, Privileges, and Access Controls in Microsoft .NET Core and Visual Studio - CVE-2021-31204

Vulnerability identifier: #VU53123

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-31204

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions in .NET and Visual Studio, which leads to security restrictions bypass and privilege escalation.

Microsoft .NET Core
Visual Studio
Arch Linux
Red Hat Enterprise Linux for x86_64
Anolis OS
Fedora
rh-dotnet31-dotnet (Red Hat package)
rh-dotnet50-dotnet (Red Hat package)
dotnet-targeting-pack-3.1
dotnet-runtime-3.1
dotnet-hostfxr-3.1
dotnet-apphost-pack-3.1
aspnetcore-targeting-pack-3.1
aspnetcore-runtime-3.1
dotnet3.1 (Red Hat package)
dotnet3.1
dotnet-templates-3.1
dotnet-sdk-3.1
dotnet-apphost-pack-5.0
dotnet-hostfxr-5.0
dotnet-runtime-5.0
dotnet-targeting-pack-5.0
dotnet5.0 (Red Hat package)
dotnet5.0
dotnet-sdk-5.0
dotnet-templates-5.0
dotnet-sdk-5.0-source-built-artifacts
Solutions Enabler
Unisphere for PowerMax Virtual Appliance
Unisphere for PowerMax
Solutions Enabler Virtual Appliance

Install updates from vendor's website.

rh-dotnet31-dotnet (Red Hat package) - update to 3.1.115-1.el7_9
rh-dotnet50-dotnet (Red Hat package) - update to 5.0.203-1.el7_9
dotnet-targeting-pack-3.1 - update to 3.1.22-3.0.1
dotnet-runtime-3.1 - update to 3.1.22-3.0.1
dotnet-hostfxr-3.1 - update to 3.1.22-3.0.1
dotnet-apphost-pack-3.1 - update to 3.1.22-3.0.1
aspnetcore-targeting-pack-3.1 - update to 3.1.22-3.0.1
aspnetcore-runtime-3.1 - update to 3.1.22-3.0.1
dotnet3.1 (Red Hat package) - update to 3.1.115-1.el8_4
dotnet3.1 - addressed in versions 3.1.115-1.fc32, 3.1.115-1.fc33, 3.1.115-1.fc34
dotnet-templates-3.1 - update to 3.1.416-3.0.1
dotnet-sdk-3.1 - update to 3.1.416-3.0.1
dotnet-apphost-pack-5.0 - update to 5.0.14-1.0.1
dotnet-hostfxr-5.0 - update to 5.0.14-1.0.1
dotnet-runtime-5.0 - update to 5.0.14-1.0.1
dotnet-targeting-pack-5.0 - update to 5.0.14-1.0.1
dotnet5.0 (Red Hat package) - update to 5.0.203-1.el8_4
dotnet5.0 - addressed in versions 5.0.203-1.fc32, 5.0.203-1.fc33, 5.0.203-1.fc34
dotnet-sdk-5.0 - update to 5.0.211-1.0.1
dotnet-templates-5.0 - update to 5.0.211-1.0.1
dotnet-sdk-5.0-source-built-artifacts - update to 5.0.211-1.0.1
Solutions Enabler - addressed in versions 9.1.0.17, 9.2.2.0
Solutions Enabler Virtual Appliance - addressed in versions 9.1.0.17, 9.2.2.0
Unisphere for PowerMax Virtual Appliance - addressed in versions 9.1.0.28, 9.2.2.2
Unisphere for PowerMax - addressed in versions 9.1.0.28, 9.2.2.2

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204

• Privilege escalation in Microsoft .NET and Visual Studio
• Red Hat Enterprise Linux update for rh-dotnet50-dotnet
• Red Hat Enterprise Linux update for rh-dotnet31-dotnet
• Red Hat Enterprise Linux 8 update for .NET 5.0
• Red Hat Enterprise Linux 8 update for .NET Core 3.1
• Arch Linux update for dotnet-sdk
• Arch Linux update for dotnet-runtime
• Arch Linux update for dotnet-runtime-3.1
• Arch Linux update for dotnet-sdk-3.1
• Multiple vulnerabilities in Dell EMC Unisphere for PowerMax and Dell EMC Solutions Enabler
• Fedora 34 update for dotnet5.0
• Fedora 33 update for dotnet5.0
• Fedora 32 update for dotnet5.0
• Fedora 34 update for dotnet3.1
• Fedora 33 update for dotnet3.1
• Fedora 32 update for dotnet3.1
• Anolis OS update for dotnet5.0
• Anolis OS update for dotnet3.1