Lucene search
Veracode Vulnerability DatabaseVERACODE:26325HistoryAug 12, 2020 - 6:04 a.m.
Information Disclosure
2020-08-1206:04:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
20.4%
github.com/google/go-tpm is vulnerable to information disclosure. An attacker is able to discover the encUsageAuth and encMigrationAuth values and calculateusageAuth ^ encMigrationAuth since the migrationAuth can be guessed for all keys created with CreateWrapKey, and subsequently discover the auth value for a key created.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/google/go-tpm | eq | 0.2.0 | |
| github.com/google/go-tpm | eq | 0.2.0 |
Related
osv
osv
Sensitive information exposure in github.com/google/go-tpm
2021-04-14 20:04:52
CVE-2020-8918
2020-08-11 19:15:17
prion
prion
Code injection
2020-08-11 19:15:00
cvelist
cvelist
cve
cve
CVE-2020-8918
2020-08-11 19:15:17
nvd
nvd
CVE-2020-8918
2020-08-11 19:15:17
github
github