Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mq99-p8pq-jp4q

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.

EPSS

Процентиль: 38%
0.0017
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 8 лет назад

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.

CVSS3: 2.2
redhat
почти 8 лет назад

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.

CVSS3: 7.5
nvd
почти 8 лет назад

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.

CVSS3: 7.5
debian
почти 8 лет назад

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key ce ...

suse-cvrf
больше 2 лет назад

Security update for gpg2

EPSS

Процентиль: 38%
0.0017
Низкий

7.5 High

CVSS3