Vulnerabilidades do Privasys Ra-tls-clients

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Privasys Ra-tls-clients: 3 registro(s), com versões afetadas e correções.

CVE-2026-108362 Crítica · 9.1 CWE-346 12/10/2026

Privasys Remote Attestation TLS Clients: TLS attestado aceita evidência de plataforma TEE não autorizada (CWE-346)

O Privasys Remote Attestation TLS Clients fornece utilitários em múltiplas linguagens para verificar conexões TLS atestadas. Antes da versão 0.11.0, as evidências de atestação TEE no Privasys attested TLS são aceitas sem exigir uma identidade de plataforma explicitamente autorizada. Quando um atacante de rede consegue forjar evidências ou extrair segredos de atestação de uma plataforma comprometida e não revogada, o verificador aceita medições válidas de uma plataforma TEE diferente e não revogada como se tivessem vindo do Attester pretendido. O atacante pode se passar pelo endpoint TLS atestado. Este problema foi corrigido na versão 0.11.0.

CVE-2026-108361 Alta · 7.2 CWE-367 12/10/2026

Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks

Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Before 0.9.1, an attacker with local access could modify workload code, data, and configuration at any time after successful connection establishment. Once Evidence was successfully appraised and the connection was established, there was a window of vulnerability from the establishment of the connection to the termination of the connection where an attacker could modify the state of the workload and platform at runtime on the TLS endpoint acting as the Attester. This vulnerability was possible because Privasys/ra-tls-clients performed attestation only once in the lifetime of the connection (at connection establishment time), and the verifying peer continued to believe that the state was the same as in the initial Evidence throughout, whereas it could be stale at some point in time. This vulnerability is fixed in 0.9.1.

CVE-2026-108269 Crítica · 9.1 CWE-346 09/10/2026

ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session

Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before permitting application traffic. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing the clients to accept an attacker-terminated connection as the attested enclave. This issue is fixed in 0.5.0.