Low severity · published Jun 13, 2019
CVE-2019-0182
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access
3.3
CVSS
0.3%
EPSS
No
On KEV
Description
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OC
Open Cloud Integrity Tehnology · Intel
All versions, or not specified · source: NVD
OP
Openattestation · Intel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-0182
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-0182
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00248.html
More from Open Cloud Integrity Tehnology
6.7
CVE-2019-0181
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access
4.4
CVE-2019-11092
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access
4.4
CVE-2019-0180
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access
4.4
CVE-2019-0179
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access
4.4
CVE-2019-0177
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access