Cocos AIで別の機械の証明が通る脆弱性、0.9.0で対処
Summary
機密計算でAIを動かすCocos AIの0.8.2以前に、想定と別の機械の証明が通ってしまう脆弱性が公表されました。利用組織は0.9.0へ更新し、そのうえで許可する機械を固有のIDで限定してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
機密計算でAIを動かすCocos AIの0.8.2以前に、想定と別の機械の証明が通ってしまう脆弱性が公表されました。利用組織は0.9.0へ更新し、そのうえで許可する機械を固有のIDで限定してください。
Original description The description as published by the source.
Cocos AI is a confidential computing system for AI. In version 0.8.2 and earlier, Cocos AI accepts trusted execution environment attestation Evidence when firmware patch levels and software measurements match, without binding the Evidence to an allowed platform owner or unique machine identity and without enforcing revocation. A remote attacker who controls or compromises another platform trusted by the same verifier can substitute valid Evidence from that platform and cause authorization of the wrong platform. This vulnerability is addressed in 0.9.0. However, this vulnerability can't be patched in source code alone, since the vulnerability arises from the confidential computing threat model itself.
Source: CVE.org (CVE Program・cvelistV5) NVD