CVE-2016-7270 in .NET Framework
Summary
The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to bypass the Always Encrypted protection mechanism and obtain sensitive cleartext information by leveraging key guessability, aka ".NET Information Disclosure Vulnerability."
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
09/09/2016
Disclosure
12/20/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 94460 | Microsoft .NET Framework cryptographic issue | 310 | Not defined | Official fix | CVE-2016-7270 |