Read the docs

Tpm2-tools Project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Tpm2-tools Project records in CISA KEV

No Tpm2-tools Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tpm2-tools 3 records HIGH Tpm2.0-tools 1 record LOW

Records

4 records

TI-2017-05166 CVE-2017-7524 · GHSA-62m4-8mv5-x4gc

Insufficiently protected credentials in tpm2-tools

Priority LOW 35

tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01242 Published 2017-06-27 Partial fix · 1.1.1 CWE-522
TI-2021-02515 CVE-2021-3565 · GHSA-jxhq-r9c5-f85p

Hard-coded credentials in tpm2-tools

Priority LOW 29

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01327 Published 2021-06-04 Fixed CWE-665
Open these records in search →