description: tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
problem types: CWE-522
affected:
{
product: tpm2-tools
vendor: TPM 2.0 Tools
versions:
status: affected, version: before 1.1.1
}