description: A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V keys as if the agent were being re-added to a verifier. This could lead to a remote code execution.
problem types: CWE-290
affected:
{
product: keylime
vendor: n/a
versions:
status: affected, version: keylime 6.3.0
}