VULNERABILITY INTELLIGENCE

CVE-2021-3406

CVSS score9.8 CRITICAL
EPSS probability0.66%
CISA KEVNot currently listed
Published2021-02-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptographic chain of trust from the Endorsement Key certificate to agent attestations.

Weakness classification

  • secalert@redhat.com: CWE-347
  • nvd@nist.gov: CWE-295

Primary references