Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: LF-Edge, Zededa EVE OS 9.5.0 Clear all filters
TI-2023-23363 CVE-2023-43635 · GHSA-4jvr-vj2c-8q37

Insufficiently protected credentials in LF-Edge, Zededa EVE OS

Priority LOW 39

Vault Key Sealed With SHA1 PCRs The measured boot solution implemented in EVE OS leans on a PCR locking mechanism.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00117 Published 2023-09-20 Fixed in 9.5.0, 0.0.0-20230519072751-977f42b07fa9 CWE-328
TI-2023-23358 CVE-2023-43630 · GHSA-phcg-h58r-gmcq

Config Partition Not Measured From 2 Fronts

Priority LOW 39

PCR14 is not in the list of PCRs that seal/unseal the “vault” key, but due to the change that was implemented in commit “7638364bc0acf8b5c481b5ce5fea11ad44ad7fd4”, fixing this issue alone would not solve the problem of t…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00113 Published 2023-09-20 Fixed in 9.5.0, 0.0.0-20230126065759-d9383a7ee4e1 CWE-328