Lucene search
Insecure Signature Verification
🗓️ 05 Aug 2022 05:16:12Reported by Veracode Vulnerability DatabaseType 
veracode🔗 sca.analysiscenter.veracode.com👁 8 Views
Insecure Signature Verification in github.com/sigstore/cosig
Show more
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | CVE-2022-35929 | 4 Aug 202219:15 | – | cve |
 | Design/Logic Flaw | 4 Aug 202219:15 | – | prion |
 | Improper verification of signature attestations in github.com/sigstore/cosign | 9 Nov 202317:47 | – | osv |
| cosign's `cosign verify-attestaton --type` can report a false positive if any attestation exists | 10 Aug 202218:40 | – | osv |
| cosign-1.10.1-1.1 on GA media | 15 Jun 202400:00 | – | osv |
| CVE-2022-35929 | 4 Aug 202219:15 | – | osv |
| BIT-cosign-2022-35929 | 6 Mar 202410:51 | – | osv |
 | CVE-2022-35929 | 4 Aug 202219:15 | – | nvd |
 | openSUSE: Security Advisory for cosign (SUSE-SU-2022:2877-1) | 24 Aug 202200:00 | – | openvas |
| SUSE: Security Advisory (SUSE-SU-2022:2877-1) | 24 Aug 202200:00 | – | openvas |
10
Node
OROROROROROROROROROROROROROROROROROROROROROR
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo05 Aug 2022 05:12Current
9.2High risk
Vulners AI Score9.2
EPSS0.002