6.5

CVE-2019-0757

A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Visual Studio 2017 Version-
   Apple ≫ macOS Version-
Microsoft ≫ Nuget Version4.3.1
Microsoft ≫ Nuget Version4.4.2
Microsoft ≫ Nuget Version4.5.2
Microsoft ≫ Nuget Version4.6.3
Microsoft ≫ Nuget Version4.7.2
Microsoft ≫ Nuget Version4.8.2
Microsoft ≫ Nuget Version4.9.4
Mono-project ≫ Mono Framework Version5.18.0.223
Mono-project ≫ Mono Framework Version5.20.0
Microsoft ≫ .Net Core Sdk Version1.1
   Microsoft ≫ .Net Core Version1.0
   Microsoft ≫ .Net Core Version1.1
Microsoft ≫ .Net Core Sdk Version2.1.500
   Microsoft ≫ .Net Core Version2.1
Microsoft ≫ .Net Core Sdk Version2.2.100
   Microsoft ≫ .Net Core Version2.2
Redhat ≫ Enterprise Linux Version8.0
Redhat ≫ Enterprise Linux Eus Version8.1
Redhat ≫ Enterprise Linux Eus Version8.2
Redhat ≫ Enterprise Linux Eus Version8.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.05% 0.918
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:P/A:N