CVE-2019-0757
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD
Description
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
Affected (21)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Apple Macos | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 5.18.0.223 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.1 |
| Running on/with | Platform Versions |
|---|---|
Microsoft .net Core | Version 1.0 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.1.500 |
| Running on/with | Platform Versions |
|---|---|
Microsoft .net Core | Version 2.1 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.2.100 |
| Running on/with | Platform Versions |
|---|---|
Microsoft .net Core | Version 2.2 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.0 | |
| Version 8.1 | |
| Version 8.2 | |
| Version 8.2 |
References (4)
Source: secure@microsoft.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Timeline
No history available yet.