CVE-2022-23950 - AskarLabs CVE Database

CVE-2022-23950

Vendor N/A

Product keylime

Weakness CWE-379

Published September 21, 2022

Last update May 27, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unprivileged users a method to prohibit keylime operations.

Key dates

02Disclosure timeline

September 21, 2022 CVE published

May 27, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-23950 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/379.html

Related vulnerabilities

04Related CVE

CVE-2021-21100 Adobe Digital Editions Arbitrary file system write vulnerability CVE-2023-3972 Insights-client: unsafe handling of temporary files and directories CVE-2021-28623 Adobe Premiere Elements Privilege Escalation Vulnerability CVE-2021-36002 Adobe Captivate Installer Creation of Temporary File In Directory With Incorrect Permissions Could Lead To Privilege Escalation CVE-2023-21612 Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation