cvedb.io
CVE-2021-43310
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2022-09-21T19:15:09.600 · Last modified 2026-06-17T04:10:49.917

Summary

A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V keys as if the agent were being re-added to a verifier. This could lead to a remote code execution.

Affected products

keylime — keylime

Does this affect you?

Add your gear to cvedb and we'll alert you only when keylime ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.