CVE-2023-43635

Description

EVE Seals Vault Key With SHA1 PCRs in github.com/lf-edge/eve

Affected packages (2)

• Go/github.com/lf-edge/evefrom 0, < 0.0.0-20230519072751-977f42b07fa9
• Go/github.com/lf-edge/evefrom 0, < 0.0.0-20230519072751-977f42b07fa9

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-43635
• PATCHhttps://github.com/lf-edge/eve
• WEBhttps://asrg.io/security-advisories/cve-2023-43635
• WEBhttps://asrg.io/security-advisories/vault-key-sealed-with-sha1-pcrs
• WEBhttps://github.com/lf-edge/eve/security/advisories/GHSA-4jvr-vj2c-8q37