CVE-2014-3585

redhat-upgrade-tool: Does not check GPG signatures when upgrading versions

• CWE-347

• https://access.redhat.com/security/cve/cve-2014-3585Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3585Issue Tracking, Vendor Advisory
• https://access.redhat.com/security/cve/cve-2014-3585Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3585Issue Tracking, Vendor Advisory

Published

Nov 22, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3579XML external entity (XXE) vulnerability in Apache ActiveMQ A…
• CVE-2014-3580The mod_dav_svn Apache HTTPD server module in Apache Subvers…
• CVE-2014-3581The cache_merge_headers_out function in modules/cache/cache_…
• CVE-2014-3582In Ambari 1.2.0 through 2.2.2, it may be possible to execute…
• CVE-2014-3583The handle_headers function in mod_proxy_fcgi.c in the mod_p…
• CVE-2014-3584The SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x b…
• CVE-2014-3586The default configuration for the Command Line Interface in …
• CVE-2014-3587Integer overflow in the cdf_read_property_info function in c…
• CVE-2014-3588Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-3589PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and P…
• CVE-2014-3590Versions of Foreman as shipped with Red Hat Satellite 6 does…6.5
• CVE-2014-3591Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not impl…4.2