Improper Authentication in keylime - CVE-2023-38201

Vulnerability identifier: #VU80467

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N]

CVE-ID: CVE-2023-38201

CWE-ID: CWE-287

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to bypass authentication.

The vulnerability exists due to an error in the challenge-response protocol implementation during agent registration. A local user can  impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.

keylime
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Basesystem Module
openSUSE Leap
Fedora
keylime-config
keylime-agent
keylime-tpm_cert_store
python3-keylime
keylime-verifier
keylime-registrar
keylime-logrotate
keylime-firewalld
keylime (Red Hat package)
keylime

Install updates from vendor's website.

keylime - update to 7.5.0
keylime-config - update to 6.3.2-150400.4.20.1
keylime-agent - update to 6.3.2-150400.4.20.1
keylime-tpm_cert_store - update to 6.3.2-150400.4.20.1
python3-keylime - update to 6.3.2-150400.4.20.1
keylime-verifier - update to 6.3.2-150400.4.20.1
keylime-registrar - update to 6.3.2-150400.4.20.1
keylime-logrotate - update to 6.3.2-150400.4.20.1
keylime-firewalld - update to 6.3.2-150400.4.20.1
keylime (Red Hat package) - update to 6.5.2-6.el9_2
keylime - update to 6.6.0-2.fc38

• https://github.com/keylime/keylime/security/advisories/GHSA-f4r5-q63f-gcww
• https://github.com/keylime/keylime/commit/9e5ac9f25cd400b16d5969f531cee28290543f2a
• https://bugzilla.redhat.com/show_bug.cgi?id=2222693

• Improper authentication in Keylime
• SUSE update for keylime
• Red Hat Enterprise Linux 9 update for keylime
• Fedora 38 update for keylime