CVE-2021-3565CWE-665

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2

published June 4, 2021

CVSS
—
EPSS
1%
Percentile
70.8
In the wild
Unconfirmed
What it is

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01327 · 70.8th percentile
Weakness
CWE-665 · Improper Initialization
Published
2021-06-04T11:39Z
EPSS history
Timeline
  • 04 JUN 11:39Z
    A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2
    cvelistv5