Security Advisory

CVE-2015-9259

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-31 21:00:00

Last updated 2024-08-06 08:43:42

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In Docker Notary before 0.1, the checkRoot function in gotuf/client/client.go does not check expiry of root.json files, despite a comment stating that it does. Even if a user creates a new root.json file after a key compromise, an attacker can produce update files referring to an old root.json file.

← Browse all CVEs View on cve.org ↗