| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.NETCore.UniversalWindowsPlatform | ≥ 5.2.0, < 5.2.4≥ 5.3.0, < 5.3.5≥ 5.4.0, < 5.4.2≥ 6.0.0, < 6.0.6 | 5.2.45.3.55.4.26.0.6 |
| System.Private.ServiceModel | ≥ 4.1.0, < 4.1.1≥ 4.3.0, < 4.3.1≥ 4.4.0, < 4.4.1 | 4.1.14.3.14.4.1 |
| System.ServiceModel.Duplex | ≥ 4.0.1, < 4.0.2≥ 4.3.0, < 4.3.1≥ 4.4.0, < 4.4.1 | 4.0.24.3.14.4.1 |
| System.ServiceModel.Http | ≥ 4.1.0, < 4.1.1≥ 4.3.0, < 4.3.1≥ 4.4.0, < 4.4.1 | 4.1.14.3.14.4.1 |
| System.ServiceModel.NetTcp | ≥ 4.1.0, < 4.1.1≥ 4.3.0, < 4.3.1≥ 4.4.0, < 4.4.1 | 4.1.14.3.14.4.1 |
| System.ServiceModel.Primitives | ≥ 4.1.0, < 4.1.1≥ 4.3.0, < 4.3.1≥ 4.4.0, < 4.4.1 | 4.1.14.3.14.4.1 |
| System.ServiceModel.Security | ≥ 4.0.1, < 4.0.2≥ 4.3.0, < 4.3.1≥ 4.4.0, < 4.4.1 | 4.0.24.3.14.4.1 |
| .net core | = 1.0= 2.0 | |
| .net framework | = 2.0= 3.0= 3.5= 3.5.1= 4.5.2= 4.6= 4.6.1= 4.6.2= 4.7= 4.7.1 | |
| powershell core | = 6.0 |
Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free