Описание
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | tpm2-tools | Will not fix |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-522
https://bugzilla.redhat.com/show_bug.cgi?id=1465341tpm2-tools: Sending password in plaintext for HMAC generation on server
EPSS
Процентиль: 67%
0.01242
Низкий
5.3 Medium
CVSS3
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 9 лет назад
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
CVSS3: 7.5
nvd
около 9 лет назад
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
CVSS3: 7.5
debian
около 9 лет назад
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due ...
CVSS3: 7.5
github
больше 4 лет назад
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
EPSS
Процентиль: 67%
0.01242
Низкий
5.3 Medium
CVSS3