CVE-2024-56169

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0

Medium · published December 18, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
7.6
In the wild
Unconfirmed
What it is

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI Relying Parties (such as Fort) are supposed to maintain a backup cache of the remote RPKI data. This can be employed as a fallback in case a new fetch fails or yields incorrect files. However, the product currently uses its cache merely as a bandwidth saving tool (because fetching is performed through deltas). If a fetch fails midway or yields incorrect files, there is no viable fallback. This leads to incomplete route origin validation data.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00184 · 7.6th percentile
Published
2024-12-18T00:00Z
EPSS history
Timeline
  • 18 DEC 00:00Z
    A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0
    cvelistv5