keylime vulnerabilities (openSUSE)
10 vulnerabilities.
-
keylimeopenSUSE Keylime: keylime: security bypass due to hardcoded tpm quote nonce 6.3 Medium -
keylimeopenSUSE Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication 9.4 Critical -
keylimeopenSUSE Keylime: keylime: registrar allows identity takeover via duplicate uuid registration 8.2 High -
keylimeopenSUSE Keylime: keylime registrar dos due to incompatible database entry handling 4.3 Medium -
keylimeopenSUSE Keylime: challenge-response protocol bypass during agent registration 6.5 Medium -
keylimeopenSUSE Keylime: registrar is subject to a dos against ssl connections 7.5 High -
keylimeopenSUSE Keylime: attestation failure when the quote's signature does not validate 2.3 Low -
keylimeopenSUSE Keylime: unhandled exceptions could lead to invalid attestation states 5.1 Medium -
keylimeopenSUSE keylime %post scriplet allows for privilege escalation from keylime user to root 7.1 High -
keylimeopenSUSE Tenant and Verifier might not use the same registrar data 9.1 Critical