A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
References
Link | Resource |
---|---|
https://access.redhat.com/errata/RHSA-2019:1259 | Third Party Advisory |
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0757 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
|
History
11 Apr 2022, 20:36
Type | Values Removed | Values Added |
---|---|---|
First Time |
Redhat enterprise Linux Server Tus
Redhat enterprise Linux Eus Redhat enterprise Linux Server Aus Redhat enterprise Linux Redhat |
|
CPE | cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:* |
|
References | (REDHAT) https://access.redhat.com/errata/RHSA-2019:1259 - Third Party Advisory |
08 Sep 2021, 17:21
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* |
Information
Published : 2019-04-09 02:29
Updated : 2023-12-10 12:59
NVD link : CVE-2019-0757
Mitre link : CVE-2019-0757
CVE.ORG link : CVE-2019-0757
JSON object : View
Products Affected
redhat
- enterprise_linux
- enterprise_linux_server_tus
- enterprise_linux_server_aus
- enterprise_linux_eus
microsoft
- .net_core
- nuget
- visual_studio_2017
- .net_core_sdk
apple
- macos
mono-project
- mono_framework
CWE