March 2019 Patch Tuesday: Microsoft patches two actively exploited Windows flaws
60
CVE-2019-0757
—CVSS 3.1
6.5 medium
EPSS
3%p85
Published
()
Modified
Description
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
- Vendors
- microsoftmono-projectredhat
- Products
- visual studio 2017, nuget, mono framework, .net core sdk, enterprise linux, enterprise linux eus, enterprise linux server aus, enterprise linux server tus
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N