HOMEVULNERABILITIESCVE-2023-38201
MEDIUM

CVE-2023-38201

CWE-639Published: August 25, 2023· Updated: Jun 17, 2026

6.5
CVSS v3.1

Official Description

A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.

NVD Source

Technical Analysis

CVE-2023-38201 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in full integrity compromise (data manipulation), with a CVSS base score of 6.5.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorAdjacent
Attack ComplexityLow
Privileges Req.None
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityHigh
AvailabilityNone
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Vendors & Products

Fedora1 product(s)
fedora
keylime1 product(s)
keylime
Red Hat7 product(s)
enterprise linuxenterprise linux eusenterprise linux for ibm z systemsenterprise linux for ibm z systems eusenterprise linux for power little endianenterprise linux for power little endian eusenterprise linux server aus
Source: NVD CPE · 9 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttps://bugzilla.redhat.com/show_bug.cgi?id=2222693
PATCHhttps://github.com/keylime/keylime/commit/9e5ac9f25cd400b16d5969f531cee28290543f2a
PATCHhttps://bugzilla.redhat.com/show_bug.cgi?id=2222693
PATCHhttps://github.com/keylime/keylime/commit/9e5ac9f25cd400b16d5969f531cee28290543f2a
ADVISORYhttps://access.redhat.com/errata/RHSA-2023:5080
ADVISORYhttps://access.redhat.com/security/cve/CVE-2023-38201
ADVISORYhttps://github.com/keylime/keylime/security/advisories/GHSA-f4r5-q63f-gcww
ADVISORYhttps://access.redhat.com/errata/RHSA-2023:5080
ADVISORYhttps://access.redhat.com/security/cve/CVE-2023-38201
ADVISORYhttps://github.com/keylime/keylime/security/advisories/GHSA-f4r5-q63f-gcww

All References (11)

→
https://access.redhat.com/errata/RHSA-2023:5080Third Party Advisory
→
https://access.redhat.com/security/cve/CVE-2023-38201Third Party Advisory
→
https://bugzilla.redhat.com/show_bug.cgi?id=2222693Issue Tracking · Patch · Third Party Advisory
→
https://github.com/keylime/keylime/commit/9e5ac9f25cd400b16d5969f531cee28290543f2aPatch
→
https://github.com/keylime/keylime/security/advisories/GHSA-f4r5-q63f-gcwwVendor Advisory
→
https://access.redhat.com/errata/RHSA-2023:5080Third Party Advisory
→
https://access.redhat.com/security/cve/CVE-2023-38201Third Party Advisory
→
https://bugzilla.redhat.com/show_bug.cgi?id=2222693Issue Tracking · Patch · Third Party Advisory
→
https://github.com/keylime/keylime/commit/9e5ac9f25cd400b16d5969f531cee28290543f2aPatch
→
https://github.com/keylime/keylime/security/advisories/GHSA-f4r5-q63f-gcwwVendor Advisory
→
https://lists.fedoraproject.org/archives/list/[email protected]/message/ZIZZB5NHNCS5D2AEH3ZAO6OQC72IK7WS/

Quick Facts

CVE IDCVE-2023-38201
CVSS Score6.5 / 10
SeverityMEDIUM
WeaknessCWE-639
CISA KEVNo
Affected3 vendor(s)
PublishedAug 25, 2023

Related CVEs (CWE-639)

CVE-2024-45032
10.0
CVE-2026-52782
9.9
CVE-2026-34037
9.9
CVE-2026-29200
9.9
CVE-2026-45552
9.9
CVE-2026-54052
9.9

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2023-38201 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2023-38201·NVD