keylime-base vulnerabilities (AlmaLinux)
7 vulnerabilities.
-
keylime-baseAlmaLinux Keylime: keylime: security bypass due to hardcoded tpm quote nonce 6.3 Medium -
keylime-baseAlmaLinux Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication 9.4 Critical -
keylime-baseAlmaLinux Keylime: keylime: registrar allows identity takeover via duplicate uuid registration 8.2 High -
keylime-baseAlmaLinux Keylime: challenge-response protocol bypass during agent registration 6.5 Medium -
keylime-baseAlmaLinux Keylime: registrar is subject to a dos against ssl connections 7.5 High -
keylime-baseAlmaLinux Keylime: attestation failure when the quote's signature does not validate 2.3 Low -
keylime-baseAlmaLinux Keylime: unhandled exceptions could lead to invalid attestation states 5.1 Medium