Description
When sealing/unsealing the “vault” key, a list of PCRs is used, which defines which PCRs are used.
In a previous project, CYMOTIVE found that the configuration is not protected by the secure boot, and in response Zededa implemented measurements on the config partition that was mapped to PCR 13.
In that process, PCR 13 was added to the list of PCRs that seal/unseal the key.
In commit “56e589749c6ff58ded862d39535d43253b249acf”, the config partition measurement moved from PCR 13 to PCR 14, but PCR 14 was not added to the list of PCRs that seal/unseal the key.
This change makes the measurement of PCR 14 effectively redundant as it would not affect the sealing/unsealing of the key.
References
Ilay Levi
Advisory Details
- CVE ID
- CVE-2023-43634
- Affected Products
- EVE OS
- Problem Type
- CWE-522 Insufficiently Protected Credentials, CWE-922 Insecure Storage of Sensitive Information
- CAPEC ID
- CAPEC-115 Authentication Bypass
- CVSS Score
- 8.8
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Published
- Sep 21, 2023