CVE:CVE-2019-0757
CNNVD:CNNVD-201903-445
Microsoft NuGet Package Manager是美国微软（Microsoft）公司的一款用于.NET框架的包管理器。
Microsoft NuGet Package Manager中存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。以下产品和版本受到影响：Microsoft .NET Core SDK 1.1版本，1.1版本，2.1.500版本；Mono Framework 5.18.0.223版本，5.20.0版本；Nuget 4.3.1版本，4.4.2版本，4.5.2版本，4.6.3版本，4.7.2版本，4.8.2版本，4.9.4版本；Visual Studio for Mac。
solution:Upgrade microsoft visual_studio_2017 to a higher version than -; Upgrade microsoft nuget to a higher version than 4.3.1,4.4.2,4.5.2,4.6.3,4.7.2,4.8.2,4.9.4,and avoid the version 4.3.1,4.4.2,4.5.2,4.6.3,4.7.2,4.8.2,4.9.4; Upgrade mono-project mono_framework to a higher version than 5.18.0.223,5.20.0,and avoid the version 5.18.0.223,5.20.0; Upgrade microsoft .net_core_sdk to a higher version than 1.1,2.1.500,2.2.100,and avoid the version 1.1,2.1.500,2.2.100; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4