CWE-1291— Public Key Re-Use for Signing both Debug and Production Code

The same public key is used for signing both debug and production code.— MITRE CWE catalog

1 active CVE classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-1291page 1 of 1

CVE-2022-1665HIGHCVSS 8.2EG 8.8
2022-06-21
A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even though it shouldn't. These kernel builds don't have the secure boot lockdown patches applied …

Map vulnerabilities like CWE-1291 to your infrastructure

EchelonGraph correlates every CVE — across CWE-1291 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →