CVE-2020-7906 Security feature bypass in n/a
Unsigned binaries in the Windows installer allow bypassing code signing verification, potentially enabling supply chain attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-7906?
CVE-2020-7906 is a high-severity vulnerability in n/a, published on 30 Jan 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3.
Weakness: CWE-347
Which versions are affected by CVE-2020-7906?
It affects 1 product.
Products include Jetbrains Rider.
How do I fix CVE-2020-7906?
No fix has been published for CVE-2020-7906 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-7906 being exploited?
There is no known exploitation of CVE-2020-7906 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-h8r4-m8jx-qp8j.