{"id":"CVE-2020-6174","published":"2020-02-05T15:49:15Z","modified":"2024-08-04T08:55:22Z","title":"TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature","vendor":null,"product":null,"tier":"tail","description":{"text":"TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00987,"percentile":0.62326,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/theupdateframework/tuf/pull/974","tags":["x_refsource_CONFIRM"]}],"priority":{"score":12.5,"factors":[{"name":"EPSS percentile","points":12.47}]},"affected":[{"ecosystem":"PyPI","package":"tuf","vulnerableRanges":["<0.12.2"],"patched":["0.12.2"],"from":["GHSA-pwqf-9h7j-7mv8","PYSEC-2020-147"],"provenance":"source"}],"euvd":{"id":"EUVD-2020-0226","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-awslabs-tough-cve-2020-6174","children":[{"from":"CVE-2020-6174","to":"CVE-2020-15093","relation":"related","confidence":"high","kind":"lineage","evidence":[{"kind":"osv-related","provenance":"source","id":"RUSTSEC-2020-0024","via":"related"}]}]}}