Bug 1512998 (CVE-2017-8700)

Summary:	CVE-2017-8700 ASP.NET: CORS not properly applied
Product:	[Other] Security Response	Reporter:	Trevor Jay <tjay>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	bgollahe, bodavis, dbhole, kanderso, lzachar, omajid, rwagner, security-response-team
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in dotNET where the CORS attribute is not properly enforced or checked. An attacker could leverage this for possible remote execution.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-12-01 11:21:25 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1513083, 1513084, 1513085
Bug Blocks:	1512757

Description Trevor Jay 2017-11-14 15:00:44 UTC

CVE-2017-8700 was assigned to the following vulnerability:

ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Information Disclosure Vulnerability".

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2017-8700

Comment 3 Tomas Hoger 2017-12-01 11:21:25 UTC

This issue did not affected .NET Core, but affected ASP.NET Core.  More details can be found in the upstream Microsoft advisories:

https://github.com/aspnet/Announcements/issues/279
https://github.com/aspnet/Mvc/issues/7054
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8700

Comment 4 Tomas Hoger 2017-12-01 11:22:10 UTC

External References:

https://github.com/aspnet/Announcements/issues/279