Vulnerabilities > Tpm2 Tools Project

DATE CVE VULNERABILITY TITLE RISK
2021-06-04 CVE-2021-3565 Use of Hard-coded Credentials vulnerability in multiple products
A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2.
5.9
2017-06-27 CVE-2017-7524 Insufficiently Protected Credentials vulnerability in Tpm2-Tools Project Tpm2.0-Tools 1.1.0
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.
network
low complexity
tpm2-tools-project CWE-522
7.5