CVE 描述
The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Missing Authentication for Critical Functionality The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. |
||
| Uncontrolled Search Path Element The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. |
||
| Download of Code Without Integrity Check The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code. |
