CVE-2024-0056

HIGH

Microsoft.Data.SqlClient 2.1-2.1.7 and System.Data.SqlClient <4.8.6 - Cleartext Transmission of Sensitive Information

Title source: llm

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Core 1

Core References

Patch, Vendor Advisory vendor-advisory

CVSS v3 8.7

EPSS 0.0118

EPSS Percentile 63.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-319

Status published

Products (16)

microsoft/.net 8.0.0

microsoft/.net 6.0.0 - 6.0.26

microsoft/.net_framework 4.6.2

microsoft/.net_framework 4.7

microsoft/.net_framework 4.7.1

microsoft/.net_framework 4.7.2

microsoft/.net_framework 3.5

microsoft/.net_framework 4.8.1

microsoft/.net_framework 2.0 sp2

microsoft/.net_framework 4.8 - 4.8.04690.02

... and 6 more

Published Jan 09, 2024

Tracked Since Feb 18, 2026