CVE-2022-23950

Mô tả

Tham khảo

• keylime/keylime commit ea5d037 · Patch
• keylime/keylime security advisory · Third Party Advisory
• seclists.org/oss-sec/2022/q1/101 · Exploit

Lỗ hổng khác của keylime

• CVE-2026-1709NGHIÊM TRỌNG 9.8A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authen…
• CVE-2023-38201TRUNG BÌNH 6.5A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue…
• CVE-2023-3674THẤP 2.8A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signatur…
• CVE-2022-3500TRUNG BÌNH 5.1A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there ex…
• CVE-2022-23952CAO 7.5In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable.