CVE-2023-38201 in Keylime情報

要約

〜によって MITRE • 2023年08月25日

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

責任者

Red Hat, Inc.

予約する

2023年07月13日

モデレーション

承諾済み

エントリ

VDB-238064

CWE

不明

EPSS

0.00500

アクティビティ

非常低い

ソース

Do you want to use VulDB in your project?

Use the official API to access entries easily!