PT-2019-2398 · Intel · Open Cloud Integrity Technology

CVE-2019-0179

·

Publicado

2019-06-11

·

Atualizado

2023-02-27

CVSS v3.1

4.4

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Open Cloud Integrity Technology (affected versions not specified)
Description The issue is related to insufficient password protection in the attestation database for Open Cloud Integrity Technology, which may allow an authenticated user to potentially enable information disclosure via local access. This is due to shortcomings in access control within the attestation database.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2019-02174
CVE-2019-0179

Produtos afetados

Open Cloud Integrity Technology