Unsanitized UUIDs in Keylime before 6.3.0 can lead to log spoofing on verifier and registrar

Unsanitized UUIDs in Keylime before 6.3.0 can lead to log spoofing on verifier and registrar

CVE-2022-23949 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar.

Learn more about our Web Application Penetration Testing UK.