medium6.5
CVE-2019-0757
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder s…
Impact
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Visual Studio 2017 | All versions |
| Microsoft | Nuget | Versions 4.3.1, 4.4.2, 4.5.2, 4.6.3, 4.7.2, 4.8.2 |
| Mono-Project | Mono Framework | Versions 5.18.0.223, 5.20.0 |
| Microsoft | .Net Core Sdk | Versions 1.1, 2.1.500, 2.2.100 |
| Redhat | Enterprise Linux | Version 8.0 |
| Redhat | Enterprise Linux Eus | Versions 8.1, 8.2, 8.4 |
| Redhat | Enterprise Linux Server Aus | Versions 8.2, 8.4 |
| Redhat | Enterprise Linux Server Tus | Versions 8.2, 8.4 |