Advisories · Technology
Privasys ra-tls-clients.
Every CVE that names Privasys ra-tls-clients among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks
- Privasys ra-tls-clients
- Race condition
- CVSS 9.1 CriticalCritical · CVSS 9+
Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)
- Privasys ra-tls-clients
- CWE-346
- CVSS 9.1 CriticalCritical · CVSS 9+
ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session
- Privasys ra-tls-clients
- CWE-346