CVE-2022-3500CWE-248

A vulnerability was found in keylime

Medium · published November 22, 2022

CVSS v3.1
5.1
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.9th percentile
Weakness
CWE-248 · Uncaught Exception
Published
2022-11-22T00:00Z
EPSS history
Timeline
  • 22 NOV 00:00Z
    A vulnerability was found in keylime
    cvelistv5