Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Tang Project records in CISA KEVNo Tang Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 36
A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01564 · Published 2022-03-02 · No fix listed CWE-200
Priority LOW 25
A race condition exists in the Tang server functionality for key generation and key rotation.
CVSS 3.1MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00568 · Published 2023-07-11 · Partial fix CWE-362
