CVE-2022-23949

CVE-2022-23949

Vendor N/A

Product keylime

Weakness CWE-290

Published September 21, 2022

Last update May 27, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar.

Key dates

02Disclosure timeline

September 21, 2022 CVE published

May 27, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-23949 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/290.html

Related vulnerabilities

04Related CVE

CVE-2024-31863 Apache Zeppelin: Replacing other users notebook, bypassing any permissions CVE-2026-30975 Sonarr Authentication Bypass vulnerability CVE-2024-50380 Authentication Bypass by Spoofing in Snap One OVRC cloud CVE-2026-27089 WordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerability CVE-2024-21494