Description (CNA)
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module (TPM) device but claiming an existing agent's unique identifier (UUID). This action overwrites the legitimate agent's identity, enabling the attacker to impersonate the compromised agent and potentially bypass security controls.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Keylime Project / keylime | affected 0 before 7.14.0 |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected 0:7.12.1-11.el10_1.3 before * |
| Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support | unaffected 0:7.12.1-2.el10_0.4 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 0:7.12.1-11.el9_7.3 before * |
| Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | unaffected 0:6.5.2-6.el9_2.1 before * |
| Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support | unaffected 0:7.3.0-13.el9_4.1 before * |
| Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support | unaffected 0:7.3.0-15.el9_6.1 before * |
CWE
CWE-694
References
- https://access.redhat.com/errata/RHSA-2025:23201
- https://access.redhat.com/errata/RHSA-2025:23210
- https://access.redhat.com/errata/RHSA-2025:23628
- https://access.redhat.com/errata/RHSA-2025:23735
- https://access.redhat.com/errata/RHSA-2025:23852
- https://access.redhat.com/errata/RHSA-2026:0429
- https://access.redhat.com/security/cve/CVE-2025-13609
- https://bugzilla.redhat.com/show_bug.cgi?id=2416761
- https://github.com/keylime/keylime/issues/1820
ADP enrichment
No English description supplied.
No references supplied.