Skip to content
OpenAdvisories

Product · confidential-containers

trustee

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2025-61779

    Trustee's attestation-policy endpoint is not protected by admin autentication

    Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitting the request was act…

    confidential-containers trustee
  • High 8.1
    CVE-2024-51997

    The Attestation Results Token can be arbitrarily modified without being detected in Trustee

    Trustee is a set of tools and components for attesting confidential guests and providing secrets to them. The ART (**Attestation Results Token**) token, generated by AS, could be manipulated by MITM attacker, but the verifier (CoCo Verification Demander like …

    confidential-containers trustee