CVE-2022-23952: Infoleak
Published Sep 21, 2022
·Updated
In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable.
Affected Software
1 affected component
Keylime Keylime<6.3.0
Remediation
Patch Available
Event History
Sep 21, 2022
CVE Published
via MITRE·06:25 PM
Data Sourced
via MITRE·06:25 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Keylime vulnerability?
The vulnerability ID for this Keylime vulnerability is CVE-2022-23952.
2
What is the severity of CVE-2022-23952?
The severity of CVE-2022-23952 is high with a severity value of 7.5.
3
What is the affected software for CVE-2022-23952?
The affected software for CVE-2022-23952 is Keylime version up to exclusive 6.3.0.
4
What is the impact of CVE-2022-23952?
CVE-2022-23952 can lead to the exposure of sensitive data as the keylime.conf file is installed as world-readable.
5
How can I fix CVE-2022-23952?
To fix CVE-2022-23952, you should update Keylime to version 6.3.0 or later.