A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade dotnet-hostUpgrade dotnet-debuginfoUpgrade dotnetUpgrade dotnet-sdk-2.1.5xxUpgrade dotnet-runtime-2.1Upgrade dotnet-runtime-2.1-debuginfoUpgrade dotnet-host-fxr-2.1Upgrade dotnet-debugsourceUpgrade dotnet-sdk-2.1Upgrade dotnet-host-fxr-2.1-debuginfoUpgrade dotnet-sdk-2.1.5xx-debuginfoUpgrade dotnet-host-debuginfo | Aug 28, 2019 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade dotnet-sdk-2.1Upgrade dotnet-runtime-2.1Upgrade dotnet-hostUpgrade dotnetUpgrade dotnet-host-fxr-2.1Upgrade dotnet-sdk-2.1.5xx | Jul 22, 2024 | Mar 12, 2019 |
| Redhat_linux | — | Upgrade dotnet-debuginfoUpgrade dotnet-host-fxr-2.1Upgrade dotnet-host-debuginfoUpgrade dotnet-runtime-2.1Upgrade dotnet-sdk-2.1.5xxUpgrade dotnetUpgrade dotnet-hostUpgrade dotnet-runtime-2.1-debuginfoUpgrade dotnet-sdk-2.1Upgrade dotnet-debugsourceUpgrade dotnet-sdk-2.1.5xx-debuginfoUpgrade dotnet-host-fxr-2.1-debuginfo | May 23, 2019 | Apr 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub