Количество 6
Количество 6
CVE-2023-38201
A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.
CVE-2023-38201
A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.
CVE-2023-38201
A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.
SUSE-SU-2023:3525-1
Security update for keylime
GHSA-f4r5-q63f-gcww
Keylime registrar and (untrusted) Agent can be bypassed by an attacker
ELSA-2023-5080
ELSA-2023-5080: keylime security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-38201 A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database. | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
 | CVE-2023-38201 A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database. | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
 | CVE-2023-38201 A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database. | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
 | SUSE-SU-2023:3525-1 Security update for keylime | 0% Низкий | около 2 лет назад | |
| GHSA-f4r5-q63f-gcww Keylime registrar and (untrusted) Agent can be bypassed by an attacker | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
| ELSA-2023-5080 ELSA-2023-5080: keylime security update (MODERATE) | почти 2 года назад |
Уязвимостей на страницу