CVE-2022-23948

概要

参考情報

• keylime/keylime commit 1a4f31a · Patch
• keylime/keylime commit d37c406 · Patch
• keylime/keylime security advisory · Third Party Advisory
• seclists.org/oss-sec/2022/q1/101 · Exploit

keylime のその他の脆弱性

• CVE-2026-1709緊急 9.8A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authen…
• CVE-2023-38201中 6.5A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue…
• CVE-2023-3674低 2.8A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signatur…
• CVE-2022-3500中 5.1A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there ex…
• CVE-2022-23952高 7.5In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable.