CVE-2023-3674

Published July 19th, 2023

View on NVD ↗

CVSS v3

2.3

LOW

CVSS v2

N/A

Affected

PROJECT

Description

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted.

keylime/keylime

A CNCF Project to Bootstrap & Maintain Trust on the Edge / Cloud and IoT

GitHub

538