Executive brief
User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation
Affected products
- Go github.com/edgelesssys/constellation
- Go github.com/edgelesssys/constellation/v2
Junglewise Threat Intelligence
GO-2023-1583 - User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation
Severity: info ยท Published 2024-08-20
Technologies: github.com/edgelesssys/constellation (Go), github.com/edgelesssys/constellation/v2 (Go). Vendors: Go.
Related threats
- GO-2025-4076 - Constellation has insecure LUKS2 persistent storage partitions which may be opened and used in github.com/edgelesssys/constellation
- GO-2023-1622 - Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation
- GO-2024-2727 - Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation
- Constallation has pods exposed to peers in VPC
- Constellation allows Emergency shell access during initramfs boot phase