PT-2021-23079 · Unknown · In-Toto-Golang

Name of the Vulnerable Software and Affected Versions: in-toto-golang versions prior to 0.3.0 Description: The issue allows authenticated attackers posing as functionaries to create attestations that may bypass DISALLOW rules in the same layout. An attacker with access to trusted private keys may...