Description
In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | keylime | keylime 6.3.0 | — |
High · 7.5
CVE-2022-23952
EUVD-2022-28868
In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable.
Published Sep 21, 2022 · Updated May 22, 2025 · Assigned by fedora