Project-MONAI/monai-deploy-informatics-gateway

CVE-2018-8292

mocsharp opened this issue · 0 comments

Investigate security vulnerability reported by Azure Container Scan

PACKAGE NAME: System.Net.Http
SEVERITY: HIGH
TARGET: opt/monai/ig/Monai.Deploy.InformaticsGateway.deps.json
DESCRIPTION:

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.