CVE-2017-7524 REJECTED

tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.

EPSS 0.25% · 48.0th percentile

Risk Scores

EPSS Score
0.25%
48.0th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTStpm2-tools0, 1.1-1

Timeline

References

Open in Interactive Console →