[{"CVE":"CVE-2014-3585","severity":"important","public_date":"2014-10-14T00:00:00Z","advisories":["RHBA-2015:2395","RHBA-2014:1396"],"bugzilla":"1126002","bugzilla_description":"CVE-2014-3585 redhat-upgrade-tool: does not check GPG signatures on package installation","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-347","affected_packages":["redhat-upgrade-tool-2:0.9.3-1.el7","redhat-upgrade-tool-1:0.7.32-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3585.json"}]