CVE-2014-3585

redhat-upgrade-tool: Does not check GPG signatures when upgrading versions

Score

CVSS 3.1 9.8 Critical

Status

Modified - secalert@redhat.com

Published

2019-11-22

Last modified

2024-08-06

Weaknesses

CWE-347

Affected products

• Redhat-upgrade-tool (Red Hat)
• Enterprise Linux (Redhat)
• Redhat-upgrade-tool (Redhat)

References

• https://access.redhat.com/security/cve/cve-2014-3585
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3585