CVE-2022-23950

Description

References

• keylime/keylime commit ea5d037 · Patch
• keylime/keylime security advisory · Third Party Advisory
• seclists.org/oss-sec/2022/q1/101 · Exploit

Altre vulnerabilità di keylime

• CVE-2026-1709CRITICO 9.8A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authen…
• CVE-2023-38201MEDIO 6.5A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue…
• CVE-2023-3674BASSO 2.8A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signatur…
• CVE-2022-3500MEDIO 5.1A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there ex…
• CVE-2022-23952ALTO 7.5In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable.