CVE-2023-38201
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. An attacker may impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user.
Risk Assessment
This vulnerability may lead to a breach of the integrity of the registrar database, posing a serious security threat to the system. Allowing an attacker to impersonate an agent could result in unauthorized access to sensitive information.
Recommendation
It is recommended to update the Keylime system to the latest version to patch this vulnerability. Additionally, an audit of the verifier list should be conducted to ensure that no fake agents are present.
Original NVD description (English source)
A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.