CVE:CVE-2020-1045
CNNVD:CNNVD-202009-369
Microsoft .NET Core和Microsoft ASP.NET Core都是美国微软（Microsoft）公司的产品。.NET Core是一套免费的开源开发平台。该平台具有多语言支持和跨平台等特点。Microsoft ASP.NET Core是一框跨平台开源框架。该框架用于构建Web应用、物联网应用和移动后端等基于云的应用程序。
Microsoft .NET Core和Microsoft ASP.NET Core 中存在安全漏洞。该漏洞源于ASP.NET Core cookie 解析器对整个 cookie 字符串进行解码，攻击者可利用该漏洞设置第二个 cookie。以下产品及版本受到影响： ASP.NET Core 2.1版本， ASP.NET Core 3.1版本。
solution:Upgrade microsoft asp.net_core to a higher version than 2.1.21,3.1.8,and avoid the version [2.1,2.1.21],[3.1,3.1.8); Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_aus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6; Upgrade redhat enterprise_linux_eus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6; Upgrade redhat enterprise_linux_tus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6