1 matches found
tpm2-tools: fixed AES wrapping key in tpm2_import
A flaw was found in tpm2-tools. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality...
5.9CVSS5.7AI score0.01327EPSS
SaveExploits0References4
20