Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

.Net vulnerabilities #40872

Open
badingb opened this issue May 13, 2024 · 0 comments
Open

.Net vulnerabilities #40872

badingb opened this issue May 13, 2024 · 0 comments
Labels
dotnet-fundamentals/svc Pri1 High priority, do before Pri2 and Pri3 ⌚ Not Triaged Not triaged

Comments

@badingb
Copy link

badingb commented May 13, 2024

Type of issue

Other (describe below)

Description

[Enter feedback here]
Critical and Exploitable Vulnerabilities can exist if .Net is not regularly updates. The install scripts are per-user installs which constantly need to be removed due to exploitable vulnerabilities. If the scirpts were provided as machine installs, the script could be put into a task scheduler to keep .net updated in an automated patch which is an NIST control. This is why security experts are leaving cybersecurity due to constant data breaches from exploitable vulnerabilities

Page URL

https://learn.microsoft.com/en-us/dotnet/core/tools/dotnet-install-script

Content source URL

https://github.com/dotnet/docs/blob/main/docs/core/tools/dotnet-install-script.md

Document Version Independent Id

5bc7caa5-f1c2-d7d5-fe02-80c65cca9672

Article author

@tdykstra

Metadata

  • ID: a2e484a9-5e0c-eb3e-1413-7b507c4fa07d
  • Service: dotnet-fundamentals
@issues-automation issues-automation bot added dotnet-fundamentals/svc Pri1 High priority, do before Pri2 and Pri3 labels May 13, 2024
@dotnet-bot dotnet-bot added the ⌚ Not Triaged Not triaged label May 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dotnet-fundamentals/svc Pri1 High priority, do before Pri2 and Pri3 ⌚ Not Triaged Not triaged
Projects
None yet
Development

No branches or pull requests

2 participants