CVE - CVE-2022-23948

CVE-ID
CVE-2022-23948	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A flaw was found in Keylime before 6.3.0. The logic in the Keylime agent for checking for a secure mount can be fooled by previously created unprivileged mounts allowing secrets to be leaked to other processes on the host.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://github.com/keylime/keylime/commit/1a4f31a6368d651222683c9debe7d6832db6f607 URL:https://github.com/keylime/keylime/commit/1a4f31a6368d651222683c9debe7d6832db6f607 MISC:https://github.com/keylime/keylime/commit/d37c406e69cb6689baa2fb7964bad75209703724 URL:https://github.com/keylime/keylime/commit/d37c406e69cb6689baa2fb7964bad75209703724 MISC:https://github.com/keylime/keylime/security/advisories/GHSA-wj36-qcfg-5j52 URL:https://github.com/keylime/keylime/security/advisories/GHSA-wj36-qcfg-5j52 MISC:https://seclists.org/oss-sec/2022/q1/101 URL:https://seclists.org/oss-sec/2022/q1/101
Assigning CNA
Fedora Project (Infrastructure Software)
Date Record Created
20220125	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20220125)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)