Skip to content
Sign in
Not rated

CVE-2019-17561 The "Apache NetBeans" autoupdate system does not fully validate code signatures

Description

The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Apache NetBeans Versions not published

Other CVEs of Apache NetBeans

The 3 CVEs of Apache NetBeans →
CVE-2020-11986 To be able to analyze gradle projects, the build scripts need to be executed Not rated CVE-2019-17560 The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads Not rated
Track this CVE