Lucene search
GoogleOSV:GHSA-3HCM-6FJC-47QQHistoryMay 24, 2022 - 10:28 p.m.
NuGet Package Manager Tampering Vulnerability
2022-05-2422:28:08
Google
osv.dev
6
nuget
package manager
tampering
vulnerability
linux
mac
authenticated attacker
build folder
obj
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default obj), aka ‘NuGet Package Manager Tampering Vulnerability’.
References
github.com/NuGet/Home/issues/7908
github.com/NuGet/NuGet.Client
github.com/NuGet/NuGet.Client/commit/e32a2ea7096debd3e513188f6779bb1041593326
nvd.nist.gov/vuln/detail/CVE-2019-0976
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0976
web.archive.org/web/20200227075944/www.securityfocus.com/bid/108210
Related
veracode
veracode
Insecure Access Controls
2019-07-08 12:41:43
cvelist
cvelist
CVE-2019-0976
2019-05-16 18:24:57
mscve
mscve
NuGet Package Manager Tampering Vulnerability
2019-05-14 07:00:00
debiancve
debiancve
CVE-2019-0976
2019-05-16 19:29:04
prion
prion
Security feature bypass
2019-05-16 19:29:00
nvd
nvd
CVE-2019-0976
2019-05-16 19:29:04
ubuntucve
ubuntucve
CVE-2019-0976
2019-05-16 00:00:00
cve
cve
CVE-2019-0976
2019-05-16 19:29:04
github
github
NuGet Package Manager Tampering Vulnerability
2022-05-24 22:28:08
symantec
symantec
kaspersky
kaspersky
KLA11485 Multiple vulnerabilities in Microsoft Developer Tools
2019-05-14 00:00:00
talosblog
talosblog