Description
CCC Attestation SIG attested-tls-poc through commit 731ca82 contains a time-of-check time-of-use vulnerability because Evidence is appraised only once during the TLS handshake, without post-handshake re-attestation. Attackers with local access to the attesting endpoint can alter workload code, data, configuration, or attached devices like GPUs while peers keep trusting the original Evidence.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CCC-Attestation | attested-tls-poc | — | — |
References
- https://doi.org/10.1145/3779208.3785387 technical-description
- https://github.com/CCC-Attestation/formal-spec-id-crisis technical-description
- https://github.com/ionut-arm/mbedtls/blob/f4ac7593826a506fc509c83cad73786acab1d442/library/ssl_tls13_generic.c#L430-L436 technical-description
- https://github.com/CCC-Attestation/attested-tls-poc product
- VulnCheck Advisory: CCC Attestation SIG attested-tls-poc through commit 731ca82 TOCTOU via Handshake-Only Attestation third-party-advisory