keylime vulnerabilities (SUSE)
9 vulnerabilities.
-
keylimeSUSE Keylime: keylime: security bypass due to hardcoded tpm quote nonce 6.3 Medium -
keylimeSUSE Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication 9.4 Critical -
keylimeSUSE Keylime: keylime: registrar allows identity takeover via duplicate uuid registration 8.2 High -
keylimeSUSE Keylime: keylime registrar dos due to incompatible database entry handling 4.3 Medium -
keylimeSUSE Keylime: challenge-response protocol bypass during agent registration 6.5 Medium -
keylimeSUSE Keylime: registrar is subject to a dos against ssl connections 7.5 High -
keylimeSUSE Keylime: unhandled exceptions could lead to invalid attestation states 5.1 Medium -
keylimeSUSE keylime %post scriplet allows for privilege escalation from keylime user to root 7.1 High -
keylimeSUSE Tenant and Verifier might not use the same registrar data 9.1 Critical