Executive brief
User data in TPM attestation vulnerable to MITM
Affected products
- Go github.com/edgelesssys/constellation/v2
Junglewise Threat Intelligence
User data in TPM attestation vulnerable to MITM
Severity: info ยท Published 2023-02-17
Technologies: github.com/edgelesssys/constellation/v2 (Go). Vendors: Go.
Related threats
- GO-2025-4076 - Constellation has insecure LUKS2 persistent storage partitions which may be opened and used in github.com/edgelesssys/constellation
- GO-2023-1622 - Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation
- GO-2023-1583 - User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation
- GO-2024-2727 - Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation
- Constallation has pods exposed to peers in VPC