PT-2024-1053 · Microsoft+4 · System.Data.Sqlclient+7

Anita Gaud + 1 · Published 2024-01-09 · Updated 2025-11-18 · CVE-2024-0056

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft.Data.SqlClient and System.Data.SqlClient (affected versions not specified)

Description A security-feature bypass vulnerability in the Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider allows attackers to affect the system. This issue is related to errors in security settings, which can be exploited by a remote attacker to bypass security restrictions and implement a man-in-the-middle attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-254

CWE-319

Related Identifiers

ALSA-2024:0150

ALSA-2024:0151

ALSA-2024:0152

ALSA-2024:0156

ALSA-2024:0157

ALSA-2024:0158

ALT-PU-2024-13117

ALT-PU-2024-13118

ALT-PU-2024-16742

ALT-PU-2024-16744

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16796

ALT-PU-2024-16939

ALT-PU-2024-2554

ALT-PU-2024-2556

ALT-PU-2024-2557

ALT-PU-2024-5998

ALT-PU-2024-6034

BDU:2024-00281

BIT-DOTNET-2024-0056

BIT-DOTNET-SDK-2024-0056

CESA-2024_0150

CESA-2024_0157

CESA-2024_0158

CVE-2024-0056

GHSA-98G6-XH36-X2P7

RHSA-2024:0150

RHSA-2024:0151

RHSA-2024:0152

RHSA-2024:0156

RHSA-2024:0157

RHSA-2024:0158

RHSA-2024:0255

RHSA-2024_0150

RHSA-2024_0151

RHSA-2024_0152

RHSA-2024_0156

RHSA-2024_0157

RHSA-2024_0158

RLSA-2024:0157

RLSA-2024:0158

Affected Products

.Net Framework

Alt Linux

Almalinux

Centos

Sql Server

Microsoft.Data.Sqlclient

Red Hat

System.Data.Sqlclient

References · 63

• https://osv.dev/vulnerability/RLSA-2024:0158 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-sdk-2024-0056 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-0156.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-0158.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0056 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-0056 · Security Note
• https://osv.dev/vulnerability/ALSA-2024:0150 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-0157.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-98g6-xh36-x2p7 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/711154 · Security Note
• https://osv.dev/vulnerability/BIT-dotnet-2024-0056 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00281 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/708756 · Security Note
• https://errata.almalinux.org/8/ALSA-2024-0150.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-0156.html · Vendor Advisory