high7.5
CVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
Impact
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tpm2-Tools Project | Tpm2.0-Tools | through 1.1.0 |