keylime vulnerabilities (PyPI)
9 vulnerabilities.
-
keylimePyPI Keylime: keylime: security bypass due to hardcoded tpm quote nonce 6.3 Medium -
keylimePyPI Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication 9.4 Critical -
keylimePyPI Keylime: keylime: registrar allows identity takeover via duplicate uuid registration 8.2 High -
keylimePyPI Keylime: keylime registrar dos due to incompatible database entry handling 4.3 Medium -
keylimePyPI Keylime: challenge-response protocol bypass during agent registration 6.5 Medium -
keylimePyPI Keylime: registrar is subject to a dos against ssl connections 7.5 High -
keylimePyPI Keylime: attestation failure when the quote's signature does not validate 2.3 Low -
keylimePyPI Keylime: unhandled exceptions could lead to invalid attestation states 5.1 Medium -
keylimePyPI Tenant and Verifier might not use the same registrar data 9.1 Critical