Test ID:	1.3.6.1.4.1.25623.1.0.826906
Category:	Windows : Microsoft Bulletins
Title:	Microsoft .NET Framework Information Disclosure Vulnerability (KB5020689)
Summary:	This host is missing an important security; update according to Microsoft KB5020689
Description:	Summary: This host is missing an important security update according to Microsoft KB5020689 Vulnerability Insight: The flaw exists in System.Data.SqlClient and Microsoft.Data.SqlClient libraries where a timeout occurring under high load can cause incorrect data to be returned as the result of an asynchronously executed query. Vulnerability Impact: Successful exploitation will allow an attacker to disclose information on the target system. Affected Software/OS: Microsoft .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Microsoft Windows Server 2012. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:A/AC:H/Au:S/C:C/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-41064 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41064
Copyright	Copyright (C) 2023 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.