2 matches found
SUSE CVE-2014-0042
OpenStack Heat Templates heat-templates, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, sets gpgcheck to 0 for certain templates, which disables GPG signature checking on downloaded packages and allows man-in-the-middle attackers to install arbitrary packages via unspecified vectors...
4.3CVSS7AI score0.01466EPSS
SaveExploits1References4
openstack-heat-templates: setting gpgcheck=0 for signed packages
OpenStack Heat Templates heat-templates, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, sets gpgcheck to 0 for certain templates, which disables GPG signature checking on downloaded packages and allows man-in-the-middle attackers to install arbitrary packages via unspecified vectors...
4.3CVSS5.9AI score0.01466EPSS
SaveExploits1References4
20