CVE-2021-3406

https://notcve.org/view.php?id=CVE-2021-3406

A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptographic chain of trust from the Endorsement Key certificate to agent attestations. Se encontró un fallo en keylime versiones 5.8.1 y anteriores. El problema en el agente de Keylime y el código registrar invalida la cadena criptográfica confiable desde el certificado Endorsement Key hasta las atestaciones del agente • https://bugzilla.redhat.com/show_bug.cgi?id=1932469 https://github.com/keylime/keylime/security/advisories/GHSA-78f8-6c68-375m https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YAWKEF2LVXUME266T6RNRVBGAD375QAT • CWE-295: Improper Certificate Validation CWE-347: Improper Verification of Cryptographic Signature •