Read the docs

Tpm2-tools Project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Tpm2-tools Project records in CISA KEV

No Tpm2-tools Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tpm2-tools 3 records HIGH Tpm2.0-tools 1 record LOW

Records

1 record in Tpm2.0-tools · all components

TI-2017-05166 CVE-2017-7524 · GHSA-62m4-8mv5-x4gc

Insufficiently protected credentials in tpm2-tools

Priority LOW 35

tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01242 Published 2017-06-27 Partial fix · 1.1.1 CWE-522
Open these records in search →