Vendors / Docker Records 133 All Threatist records
Exploited (KEV) 1 In CISA KEV
CVSS critical 24 CVSS 9.0–10.0
CVSS high 66 CVSS 7.0–8.9
Exploited now Docker records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
In Docker Notary before 0.1, the checkRoot function in gotuf/client/client.go does not check expiry of root.json files, despite a comment stating that it does.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01293 · Published 2018-03-31 · No fix listed CWE-434
Priority LOW 35
In Docker Notary before 0.1, gotuf/signed/verify.go has a Signature Algorithm Not Matched to Key vulnerability.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2018-03-31 · Fixed in 0.1.0 CWE-310
Open these records in search → All records by CVSS severity
Critical24 High66 Medium40 Low3 No CVSS0