KE
Product
Keylime
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 5Medium 3Low 1
Watch
Add Keylime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38200 | 7.5 | Jul 24 | A flaw was found in Keylime Affected: All versions, or not specified |
| CVE-2022-23952 | 7.5 | Sep 21 | In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable Affected: before 6.3.0 |
| CVE-2022-23950 | 7.5 | Sep 21 | In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unprivileged users a method to prohibit keylime operations Affected: before 6.3.0 |
| CVE-2022-23949 | 7.5 | Sep 21 | In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar Affected: before 6.3.0 |
| CVE-2022-23948 | 7.5 | Sep 21 | A flaw was found in Keylime before 6.3.0 Affected: before 6.3.0 |
Showing 5