Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: AWS tough — aws.amazon.com/security/security-bulletins/AWS-2025-007 Clear all filters
TI-2025-02522 CVE-2025-2887 · GHSA-q6r9-r9pw-4cf7

Failure to detect delegated target rollback in tough

Priority LOW 26

During a target rollback, the client fails to detect the rollback for delegated targets.

CVSS 4.0MEDIUM 5.7 Network High privileges User interaction EPSS 0.00332 Published 2025-03-27 Fixed in 0.20.0 CWE-1025
TI-2025-02521 CVE-2025-2886 · GHSA-v4wr-j3w6-mxqc

Terminating targets role delegations are not respected in tough

Priority LOW 26

Missing validation of terminating delegation causes the client to continue searching the defined delegation list, even after searching a terminating delegation.

CVSS 4.0MEDIUM 5.7 Network High privileges User interaction EPSS 0.00332 Published 2025-03-27 Fixed in 0.20.0 CWE-670
TI-2025-02520 CVE-2025-2885 · GHSA-5vmp-m5v2-hx47

Root metadata version not validated in tough

Priority LOW 26

Missing validation of the root metatdata version number could allow an actor to supply an arbitrary version number to the client instead of the intended version in the root metadata file, altering the version fetched by…

CVSS 4.0MEDIUM 5.7 Network High privileges User interaction EPSS 0.00332 Published 2025-03-27 Fixed in 0.20.0 CWE-1288