CWE-1291Public Key Re-Use for Signing both Debug and Production Code

Description

The same public key is used for signing both debug and production code.

[object Object]

Common consequences

• Confidentiality,Integrity,Availability,Access Control,Accountability,Authentication,Authorization,Non-Repudiation,Other→Read Memory,Modify Memory,Execute Unauthorized Code or Commands,Gain Privileges or Assume Identity,Varies by Context

Potential mitigations

• Implementation
  Use different keys for Production and Debug.

Related CWEs

Recent CVEs classified under this CWE