Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-0976

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default "obj"), aka 'NuGet Package Manager Tampering Vulnerability'.

Published

2019-05-16T19:29:04.850

Last Modified

2024-11-21T04:17:36.263

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

3.9

Impact Score

2.9

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	microsoft	nuget	5.0.2	Yes
Operating System	apple	macos	-	No
Operating System	linux	linux_kernel	-	No

References

http://www.securityfocus.com/bid/108210 Broken Link ([email protected])
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0976 Patch, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/108210 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0976 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)