The remote Windows host has an installation of .NET Core with a version less than 2.0.5. Therefore, the host is affected by multiple vulnerabilities :

  - A security feature bypass in X509 Certificate Validation allows an attacker to present a certificate that is marked as invalid for a specific use, but a component uses it for that purpose. (CVE-2018-0786)

  - A denial of service vulnerability exists due to improper processing of XML documents. この脆弱性を悪用した攻撃者が、.NETアプリケーションに対するサービス拒否を発生させる可能性があります。A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to a .NET Core application. (CVE-2018-0764)

検出

.NET Coreのセキュリティ更新プログラム（2018年1月）

high Nessus プラグイン ID 105730

変更ログが見つかりません