PT-2022-16358 · Keylime · Keylime

Matthias Gerstner · Published 2022-09-21 · Updated 2022-09-22 · CVE-2022-23948

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Keylime versions prior to 6.3.0

Description A flaw in the Keylime agent's logic for checking secure mounts can be exploited, allowing secrets to be leaked to other processes on the host. This occurs because previously created unprivileged mounts can fool the secure mount check.

Recommendations For versions prior to 6.3.0, update to version 6.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information on the host to minimize the risk of secrets being leaked.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2022-23948

GHSA-WJ36-QCFG-5J52

OPENSUSE-SU-2024:11785-1

Affected Products

Keylime

References · 7

• 🔥 https://seclists.org/oss-sec/2022/q1/101 · Exploit
• https://github.com/keylime/keylime/commit/1a4f31a6368d651222683c9debe7d6832db6f607 · Patch
• https://github.com/keylime/keylime/commit/d37c406e69cb6689baa2fb7964bad75209703724 · Patch
• https://osv.dev/vulnerability/CVE-2022-23948 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23948 · Security Note
• https://github.com/keylime/keylime/security/advisories/GHSA-wj36-qcfg-5j52 · Note
• https://t.me/cibsecurity/50228 · Telegram Post