CVE-2022-23949 in Keylime

Sumário

de MITRE • 21/09/2022

In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 25/01/2022
• Divulgação: 21/09/2022
• Moderação: aceite
• Entrada: VDB-209275
• CPE: pronto
• CWE: CWE-290 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.01086
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-23949
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-23949
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-23949/