CVE-2019-1351

Katalog CVE

CVSS 7.5 · High EPSS 8,7%

Kerentanan Use of Incorrectly-Resolved Name or Reference pada microsoft visual studio 2017, microsoft visual studio 2019 +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.

Rincian

Terbit di NVD

24 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-706: Use of Incorrectly-Resolved Name or Reference

EPSS (30 hari)

8,7% peluang dieksploitasi; lebih tinggi dari 95,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1351 patch · advisory vendor
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html
• https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com/
• https://security.gentoo.org/glsa/202003-30