CVE-2019-17561

The "Apache NetBeans" autoupdate system does not fully validate code signatures

published March 30, 2020

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01675 · 76.7th percentile
Published
2020-03-30T18:44Z
EPSS history
Timeline
  • 30 MAR 18:44Z
    The "Apache NetBeans" autoupdate system does not fully validate code signatures
    cvelistv5