Msrc Cm1 Tpm2-Tools 4.2-2 On Cbl Mariner 1.0 vulnerabilities

1 known vulnerability affecting msrc/cm1_tpm2-tools_4.2-2_on_cbl_mariner_1.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-3565MEDIUMCVSS 5.92021-06-08

CVE-2021-3565 [MEDIUM] CWE-798 A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper potentially allowing a MITM attacker to unwrap the inner portion and re A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerabil