CVE-2019-0976

EPSS 1.2%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 may 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default "obj"), aka 'NuGet Package Manager Tampering Vulnerability'.

Productos afectados

Microsoft · Nuget

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0976 http://www.securityfocus.com/bid/108210