← Database

CVE-2022-23950

HIGH CVSS: 7.5 Published: 2022-09-21 Modified: 2026-06-17

Description

In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unprivileged users a method to prohibit keylime operations.

Affected Platforms

Keylime Keylime

Weakness Type

CWE-379, CWE-668

References