vulnerability

Red Hat: CVE-2022-3500: CVE-2022-3500 keylime: exception handling and impedance match in tornado_requests (Multiple Advisories)

Severity
5
CVSS
(AV:L/AC:M/Au:N/C:N/I:N/A:C)
Published
Nov 15, 2022
Added
Nov 16, 2022
Modified
Sep 1, 2025

Description

A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore.

Solutions

redhat-upgrade-keylimeredhat-upgrade-keylime-baseredhat-upgrade-keylime-registrarredhat-upgrade-keylime-selinuxredhat-upgrade-keylime-tenantredhat-upgrade-keylime-verifierredhat-upgrade-python3-keylime
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.