Linux Distros Unpatched Vulnerability : CVE-2025-61779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to...

trustee 安全漏洞

trustee is an open source component of Confidential Containers. A security vulnerability exists in trustee versions prior to 0.15.0, which stems from an attestation-policy endpoint that does not validate the identity of a kbs-client, which could result in an arbitrary kbs-client modifying the...

CVE-2025-61779: Authorization Bypass Through User-Controlled Key

Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitting the request was actually authenticated had the right key...