CVE-2016-0149

Published: May 11, 2016Modified: May 6, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows man-in-the-middle attackers to obtain sensitive cleartext information via vectors involving injection of cleartext data into the client-server data stream, aka "TLS/SSL Information Disclosure Vulnerability."

Affected (7)

Products: Microsoft: .net Framework

Microsoft

1 product

.net Framework

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 2.0 sp2
Microsoft .net Framework	Version 3.0 sp2
Microsoft .net Framework	Version 3.5.1
Microsoft .net Framework	Version 3.5
Microsoft .net Framework	Version 4.5.2
Microsoft .net Framework	Version 4.6.1
Microsoft .net Framework	Version 4.6