CyberRota Analysis
AI-GeneratedContrast versions prior to 1.16.0 are vulnerable to remote attestation relay attacks, allowing an attacker to impersonate a Contrast Coordinator or workload by intercepting network traffic and relaying forged attestation reports. This vulnerability undermines the integrity of identity verification in Contrast's attested TLS, potentially leading to unauthorized access and data breaches. Organizations using affected versions should prioritize immediate updates to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to specific, physically trusted hardware. An attacker who can both intercept network traffic between the CLI and the Coordinator (or between the Coordinator and an attested component) and forge reports or extract secrets from any single TEE machine under their physical control can relay such a report to impersonate a Contrast Coordinator or a Contrast workload, defeating identity verification in Contrast's attested TLS (aTLS).