Описание
redhat-upgrade-tool: Does not check GPG signatures when upgrading versions
It was found that the redhat-upgrade-tool did not check GPG signatures on downloaded and installed packages during the upgrade process.
Дополнительная информация
Статус:
Important
Дефект:
CWE-347
https://bugzilla.redhat.com/show_bug.cgi?id=1126002redhat-upgrade-tool: does not check GPG signatures on package installation
EPSS
Процентиль: 61%
0.01064
Низкий
7.6 High
CVSS2
Связанные уязвимости
CVSS3: 9.8
nvd
больше 6 лет назад
redhat-upgrade-tool: Does not check GPG signatures when upgrading versions
CVSS3: 9.8
github
около 4 лет назад
redhat-upgrade-tool: Does not check GPG signatures when upgrading versions
EPSS
Процентиль: 61%
0.01064
Низкий
7.6 High
CVSS2