Lucene search
Veracode Vulnerability DatabaseVERACODE:11559HistoryJan 15, 2019 - 9:03 a.m.
Man-in-the-Middle (MitM)
2019-01-1509:03:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
58.6%
redhat-upgrade-tool is vulnerable to man-in-the-middle (MitM) attack. The tool does not implement proper GPG signature verification when performing package installations, allowing an attacker to perform man-in-the-middle attacks against the client.
| CPE | Name | Operator | Version |
|---|---|---|---|
| redhat-upgrade-tool | eq | 0.7.6__1.el7.centos | |
| redhat-upgrade-tool | eq | 0.7.6__1.el7.centos |
Related
cve
cve
CVE-2014-3585
2019-11-22 15:15:10
prion
prion
Design/Logic Flaw
2019-11-22 15:15:00
nvd
nvd
CVE-2014-3585
2019-11-22 15:15:10
cvelist
cvelist
CVE-2014-3585
2019-11-22 14:51:06