Microsoft NuGet Package Manager CVE-2019-0976 Tampering Security Bypass Vulnerability

Bugtraq ID:	108210
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-0976
Remote:	No
Local:	Yes
Published:	May 14 2019 12:00AM
Updated:	May 14 2019 12:00AM
Credit:	Microsoft
Vulnerable:	Microsoft NuGet 5.0.2
Not Vulnerable:

Microsoft NuGet Package Manager CVE-2019-0976 Tampering Security Bypass Vulnerability

Microsoft NuGet is prone to a security bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions.

Microsoft NuGet Package Manager CVE-2019-0976 Tampering Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft NuGet Package Manager CVE-2019-0976 Tampering Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft NuGet Package Manager CVE-2019-0976 Tampering Security Bypass Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• CVE-2019-0976 | NuGet Package Manager Tampering Vulnerability (Microsoft)