Keylime Identity Takeover Vulnerability via Duplicate UUID Registration

A vulnerability in Keylime allows an attacker to take over an existing agent's identity by registering a new agent with a duplicate UUID, using a different Trusted Platform Module (TPM) device. This action overwrites the identity of the legitimate agent, enabling impersonation and potential bypass of security controls.

Impact

Exploitation of this vulnerability allows for identity takeover of an existing agent, enabling impersonation and potential bypass of security controls associated with that agent.

Reproduction

To reproduce this vulnerability, register a new agent with a different TPM device and EK certificate, but use the UUID of an existing agent. This will overwrite the identity of the original agent, allowing the attacker to impersonate it.