CVE-2019-0976

EPSS 1.2%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 mai 2019Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default "obj"), aka 'NuGet Package Manager Tampering Vulnerability'.

Produtos afetados

Microsoft · Nuget

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0976 http://www.securityfocus.com/bid/108210