CVE-2015-9259
CRITICALDocker Notary < 0.1 - Unrestricted Upload of File with Dangerous Type via Root.json Expiry Bypass
Title source: llmDescription
In Docker Notary before 0.1, the checkRoot function in gotuf/client/client.go does not check expiry of root.json files, despite a comment stating that it does. Even if a user creates a new root.json file after a key compromise, an attacker can produce update files referring to an old root.json file.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://docs.docker.com/notary/changelog/
Third Party Advisory x_refsource_misc
https://github.com/theupdateframework/notary/blob/master/docs/resources/ncc_docker_notary_audit_2015_07_31.pdf
Scores
CVSS v3
9.8
EPSS
0.0134
EPSS Percentile
67.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-434
Status
published
Products (1)
docker/notary
< 0.1
Published
Mar 31, 2018
Tracked Since
Feb 18, 2026