[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fC0qJyWq0MCJodsn13k7lZaq5cK0oZv1ES0ipsvm--z4":3,"g5a-risk:CVE-2015-9259":110},{"success":4,"data":5,"meta":108},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":60,"weaknesses":61,"weaknessesCount":48,"isActivelyExploited":70,"cisaInfo":15,"otxData":15,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":106,"notableEvents":107},"CVE-2015-9259","What is CVE-2015-9259?","In Docker Notary before 0.1, the checkRoot function in gotuf\u002Fclient\u002Fclient.go does not check expiry of root.json files, despite a comment stating that it does. Even if a user creates a new root.json file after a key compromise, an attacker can produce update files referring to an old root.json file.","In Docker Notary before 0.1, the checkRoot function in gotuf\u002Fclient\u002Fclient.go does not check expiry of root.json files, despite a comment stating that it doe...","2018-03-31T21:29:00.31","2018-05-01T15:50:26.41",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01293,[39,39,39,39,39,39,39],"Critical",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"docker","notary","*","cpe:2.3:a:docker:notary:*:*:*:*:*:*:*:*",1,[50,55],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fdocs.docker.com\u002Fnotary\u002Fchangelog\u002F","Docker",[54],"Vendor Advisory",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fgithub.com\u002Ftheupdateframework\u002Fnotary\u002Fblob\u002Fmaster\u002Fdocs\u002Fresources\u002Fncc_docker_notary_audit_2015_07_31.pdf","GitHub",[59],"Third Party Advisory",2,[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2015-9259? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-9259, a critical severity cyber security vulnerability from 2018. In Docker Notary before 0.1, the checkRoot function in g...","CVE-2015-9259, CVE-2015-9259 vulnerability, CVE-2015-9259 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, docker security, notary vulnerability","\u002Fwhat-is\u002Fcve-2015-9259",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-9259","Cybersecurity","CVE-2015-9259, CVE-2015-9259 vulnerability, CVE-2015-9259 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":15,"Negate":15,"Nodes":99},[100],{"Operator":101,"Negate":15,"CPEMatch":102},"OR",[103],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":104,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":105,"VersionEndIncluding":15},"73F8D468-F648-4D87-AD52-AFA1AABC9A8E","0.1",[],[],{"lastModified":11,"cacheTime":109,"version":33},1792372324691,{"score":111,"band":112,"action":113,"scoredAt":114},54,"Medium","Plan remediation","2026-10-16T06:43:44.206046+00:00"]