CWE-1291: Public Key Re-Use for Signing both Debug and Production Code

Filter

The same public key is used for signing both debug and production code.

What the weakness is: CWE-1291 at MITRE. All weaknesses

Ask an AI about CWE-1291

Show the prompt

Explain CWE-1291: Public Key Re-Use for Signing both Debug and Production Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1291.html and https://cve.bz/cve/cwe/1291?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

8.2CVE-2022-1665EPSS 0.3%2022-06-21
A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even though it shouldn't. These kernel builds don't have the secure boot lockdown patches applied …