Vulnerabilities
Privasys Go Patch Fixes Critical RA-TLS Certificate Relay Vulnerability
A critical flaw in Privasys Go allowed attackers to relay enclave certificates across sessions. The vendor has released a fix in version 0.5.1.
Remote Attestation
Everything Threat Times has reported about Remote Attestation: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Privasys ra-tls-clients 0.5.0 Fixes Critical Remote Attestation Relay Flaw
A critical vulnerability in Privasys remote attestation TLS clients allowed attackers to relay quotes, bypassing security checks in versions prior to 0.5.0.
Vulnerabilities
Critical TLS Flaw in Privasys rustls Allows Quote Relay Attacks
A critical vulnerability in the Privasys rustls library allows attackers to relay enclave quotes, compromising attestation integrity until version 0.8.1.
Vulnerabilities
Privasys Fixes Critical TLS Relay Flaw in Enclave OS Mini SGX Runtime
A missing TLS session binding in Privasys Enclave OS Mini allowed attackers to relay quotes and impersonate attested enclaves.