VULNERABILITY INTELLIGENCE
CVE-2015-3408
CVSS score10 NONE
EPSS probability5.62%
CISA KEVNot currently listed
Published2015-05-19
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
Weakness classification
- nvd@nist.gov: CWE-77