← CVE Intelligence

CVE-2024-0056

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / productVersions
Microsoft / Microsoft SQL Server 2022 (GDR)affected 16.0.0 before 16.0.1110.1
Microsoft / .NET 6.0affected 6.0.0 before 6.0.26
Microsoft / .NET 7.0affected 7.0.0 before 7.0.15
Microsoft / .NET 8.0affected 8.0 before 8.0.1
Microsoft / Microsoft.Data.SqlClientaffected 2.0 before 2.1.7
Microsoft / Microsoft.Data.SqlClientaffected 3.0 before 3.1.5
Microsoft / Microsoft.Data.SqlClientaffected 4.0 before 4.0.5
Microsoft / Microsoft.Data.SqlClientaffected 5.0 before 5.1.3
Microsoft / System.Data.SqlClientaffected 1.0 before 4.8.6
Microsoft / Microsoft Visual Studio 2022 version 17.2affected 17.2.0 before 17.2.23
Microsoft / Microsoft Visual Studio 2022 version 17.4affected 17.4.0 before 17.4.15
Microsoft / Microsoft Visual Studio 2022 version 17.6affected 17.6.0 before 17.6.11
Microsoft / Microsoft Visual Studio 2022 version 17.8affected 17.8.0 before 17.8.4
Microsoft / Microsoft SQL Server 2022 (CU 10)affected 0 before 16.0.4100.1
Microsoft / Microsoft .NET Framework 4.8affected 4.8.0 before 4.8.04690.02
Microsoft / Microsoft .NET Framework 3.5 AND 4.8affected 4.8.0 before 4.8.04690.02
Microsoft / Microsoft .NET Framework 3.5 AND 4.7.2affected 4.7.0 before 4.7.04081.03
Microsoft / Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2affected 4.7.0 before 4.7.04081.02
Microsoft / Microsoft .NET Framework 3.5 AND 4.8.1affected 4.8.1 before 4.8.09214.01
Microsoft / Microsoft .NET Framework 2.0 Service Pack 2affected 2.0.0 before 3.0.50727.8976

CWE

CWE-319

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.