CWE-1283: Mutable Attestation or Measurement Reporting Data
The register contents used for attestation or measurement reporting data to verify boot flow are modifiable by an adversary.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- tpm2-software tpm2-tools tpm2 does not detect if quote was not generated by TPM 4.3 Medium
- keylime, fedoraproject fedora, red hat enterprise linux 9 +2 more Keylime: attestation failure when the quote's signature does not validate 2.3 Low
- dominionvoting imagecast x, dominion voting systems imagecast x application, imagecast x firmware +2 more 2.2.2 MUTABLE ATTESTATION OR MEASUREMENT REPORTING DATA CWE-1283 4.6 Medium