CVE-2021-34532

MediumCVSS 5.5/10Last modified Nov 2, 2026

Description

ASP.NET Core and Visual Studio Information Disclosure Vulnerability

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
MicrosoftASP.NET Core 2.1>= 2.0, < 2.1.29
MicrosoftASP.NET Core 3.1>= 3.0, < 3.1.18
MicrosoftASP.NET Core 5.0>= 5.0, < 5.0.9
MicrosoftMicrosoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9)>= 16.10.0, < 16.10.5
MicrosoftMicrosoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)>= 16.0, < 16.4.25
MicrosoftMicrosoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)>= 16.0.0, < 16.7.18
MicrosoftMicrosoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)>= 15.0.0, < 16.9.10
MicrosoftVisual Studio 2019 for Mac version 8.10>= 8.1.0, < 8.10.7

References

Timeline

Published
Aug 12, 2021
Last modified
Nov 2, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-345337.8Windows Graphics Component Font Parsing Remote Code Execution VulnerabilityCVE-2021-345346.8Windows MSHTML Platform Remote Code Execution VulnerabilityCVE-2021-345358.8Remote Desktop Client Remote Code Execution VulnerabilityCVE-2021-345367.8Windows Storage Spaces Controller Elevation of Privilege VulnerabilityCVE-2021-345377.8Windows Bluetooth Driver Elevation of Privilege VulnerabilityCVE-2021-345387.5Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved entities in the querCVE-2021-345397.2An issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java Version setting means that an unintended executabCVE-2021-34547.5Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter InconsisCVE-2021-345406.1Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard.CVE-2021-345437.5The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain CVE-2021-345446.5An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords arCVE-2021-345466.8An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switc