Authorization Bypass

Keylime is vulnerable to an attack which allows an attacker to Bypass the Challenge-Response Protocol during agent registration. The vulnerability occurs due to the registrar disclosing the correct “auth_tag” in the error message. This could allow an attacker to simply record the correct expected “auth_tag” from the HTTP error message and perform the activate call again bypassing registration process.