PT-2019-2458 · Intel · Open Cloud Integrity Technology

CVE-2019-11092

·

Publicado

2019-06-11

·

Atualizado

2023-03-24

CVSS v3.1

4.4

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Open Cloud Integrity Technology (affected versions not specified)
Description The issue is related to insufficient password protection in the attestation database for Open Cloud Integrity Technology. This may allow an authenticated user to potentially enable information disclosure via local access. The vulnerability is connected to weaknesses in password handling during the login process.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-522CWE-254

Identificadores relacionados

BDU:2019-02236
CVE-2019-11092

Produtos afetados

Open Cloud Integrity Technology