SB20240417118 - Information disclosure in Microsoft .NET Framework

Description

This security bulletin contains information about 1 security vulnerability.

1) Information exposure through an error message (CVE-ID: CVE-2024-29059)

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to excessive output of information in an error message. A remote attacker can gain access to sensitive information.

Remediation

Install update from vendor's website.

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29059
• https://code-white.com/blog/leaking-objrefs-to-exploit-http-dotnet-remoting/