Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: LF-Edge, Zededa EVE OS 8.6.0, 9.5.0 Clear all filters
TI-2023-23359 CVE-2023-43631 · GHSA-3mq9-xhgq-r7gj

SSH as Root Unlockable Without Triggering Measured Boot

Priority LOW 39

On boot, the Pillar eve container checks for the existence and content of “/config/authorized_keys”.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0017 Published 2023-09-21 Fixed in 8.6.0, 9.5.0 +1 CWE-522
TI-2023-23361 CVE-2023-43633 · GHSA-4c4v-42hc-72p6

Debug Functions Unlockable Without Triggering Measured Boot

Priority LOW 39

On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0017 Published 2023-09-21 Fixed in 8.6.0, 9.5.0 +1 CWE-522
TI-2023-23362 CVE-2023-43634 · GHSA-wc42-fcjp-v8vq

Config Partition Not Protected by Measured Boot

Priority LOW 39

When sealing/unsealing the “vault” key, a list of PCRs is used, which defines which PCRs are used.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00171 Published 2023-09-21 Fixed in 8.6.0, 9.5.0 +1 CWE-522