CVEvulnerability
CVE-2019-0976
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-05-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default "obj"), aka 'NuGet Package Manager Tampering Vulnerability'.
Affected configurations
• microsoft nuget 5.0.2
References
- http://www.securityfocus.com/bid/108210 Broken Link
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0976 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/108210 Broken Link
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0976 Patch, Vendor Advisory