CVE-2022-1053

Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK and identity quote and the verifier for validating the integrity quote. This allows an attacker to use one AK, EK pair from a real TPM to pass EK validation and give the verifier an AK of a software TPM. A successful attack breaks the entire chain of trust because a not validated AK is used by the verifier. This issue is worse if the validation happens first and then the agent gets added to the verifier because the timing is easier and the verifier does not validate the regcount entry being equal to 1,

• CWE-20
• CWE-20

• https://bugzilla.redhat.com/show_bug.cgi?id=2065024%2C
• https://github.com/keylime/keylime/commit/bd5de712acdd77860e7dc58969181e16c7a8dc5dPatch, Third Party Advisory
• https://github.com/keylime/keylime/security/advisories/GHSA-jf66-3q76-h5p5%2C
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A7WAKVXM7L5D2DUACV6EHA6EJNAX2GVL/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RF6QHU4UGSBATC3HOOE7OP66CYVTR7CV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WEW2PAXO5YGLDLPG45YV2OPLJXJSCECQ/
• https://bugzilla.redhat.com/show_bug.cgi?id=2065024%2C
• https://github.com/keylime/keylime/commit/bd5de712acdd77860e7dc58969181e16c7a8dc5dPatch, Third Party Advisory
• https://github.com/keylime/keylime/security/advisories/GHSA-jf66-3q76-h5p5%2C
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A7WAKVXM7L5D2DUACV6EHA6EJNAX2GVL/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RF6QHU4UGSBATC3HOOE7OP66CYVTR7CV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WEW2PAXO5YGLDLPG45YV2OPLJXJSCECQ/

Published

May 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1047The Themify Post Type Builder Search Addon WordPress plugin …6.1
• CVE-2022-1048A use-after-free flaw was found in the Linux kernel’s sound …7
• CVE-2022-1049A flaw was found in the Pacemaker configuration tool (pcs). …8.8
• CVE-2022-1050A flaw was found in the QEMU implementation of VMWare's para…8.8
• CVE-2022-1051The WPQA Builder Plugin WordPress plugin before 5.2, used as…5.4
• CVE-2022-1052Heap Buffer Overflow in iterate_chained_fixups in GitHub rep…5.5
• CVE-2022-1054The RSVP and Event Management Plugin WordPress plugin before…5.3
• CVE-2022-1055A use-after-free exists in the Linux Kernel in tc_new_tfilte…7.8
• CVE-2022-1056Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows…5.5
• CVE-2022-1057The Pricing Deals for WooCommerce WordPress plugin through 2…9.8
• CVE-2022-1058Open Redirect on login in GitHub repository go-gitea/gitea p…6.1
• CVE-2022-1059Aethon TUG Home Base Server versions prior to version 24 are…6.1