CVE-2022-3500

2022-11-2200:00:00

CWE-248

redhat

www.cve.org

cve-2022-3500

keylime

vulnerability

attestation

verifier

rogue agent

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

35.3%

JSON

A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "keylime",
    "versions": [
      {
        "version": "keylime 6.5.2",
        "status": "affected"
      }
    ]
  }
]