Common Weakness Enumeration

CWE-1283 Mutable Attestation or Measurement Reporting Data

Description

The register contents used for attestation or measurement reporting data to verify boot flow are modifiable by an adversary.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-1283 ordered by modification date.

1 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-g4wg-cfpf-9689 CVE-2023-3674 MODERATE
pypi/keylime

keylime fails to flag device as untrusted when signature does not validate

 2024-09-24