Security Advisory

CVE-2016-10563

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-05-31 20:00:00
Last updated 2024-09-16 18:49:48
Assigner hackerone
State PUBLISHED

Description

During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP. This allows for a MITM attack to compromise the integrity of the resources used by this module and could allow for further compromise.