CVE-2023-38201
Assigner: redhat
Published: 2023-08-25T16:15:39.449Z
State: PUBLISHED
title: Keylime: challenge-response protocol bypass during agent registration
metrics: other: content: value: Moderate
namespace: https://access.redhat.com/security/updates/classification/
type: Red Hat severity rating
cvssV3_1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
version: 3.1
format: CVSS
descriptions: value: A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.
affected: vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: keylime
defaultStatus: affected
versions: version: 0:6.5.2-6.el9_2
lessThan: *
versionType: rpm
status: unaffected
cpes: cpe:/a:redhat:enterprise_linux:9::appstream
datePublic: 2023-08-23T00:00:00+00:00
problemTypes: descriptions: cweId: CWE-639
description: Authorization Bypass Through User-Controlled Key
type: CWE
x_redhatCweChain: CWE-639: Authorization Bypass Through User-Controlled Key
timeline: time: 2023-07-13T00:00:00+00:00
value: Reported to Red Hat.
time: 2023-08-23T00:00:00+00:00
value: Made public.