Vulnerability Description
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default "obj"), aka 'NuGet Package Manager Tampering Vulnerability'.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Nuget | 5.0.2 |
| Apple | Macos | - |
| Linux | Linux Kernel | - |
References
- http://www.securityfocus.com/bid/108210Broken Link
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0976PatchVendor Advisory
- http://www.securityfocus.com/bid/108210Broken Link
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0976PatchVendor Advisory
FAQ
What is CVE-2019-0976?
CVE-2019-0976 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default "obj"), aka '...
How severe is CVE-2019-0976?
CVE-2019-0976 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-0976?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Nuget, Apple Macos, Linux Linux Kernel.