PT-2020-4944

CVE-2020-24454

·

Published

2020-11-10

·

Updated

2020-12-01

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Intel Quartus Prime Pro versions prior to 20.3 Intel Quartus Prime Standard versions prior to 20.2
Description: The issue is related to improper restriction of XML external entity references, which could allow a remote attacker to gain unauthorized access to protected information. This may enable information disclosure via network access.
Recommendations: For Intel Quartus Prime Pro versions prior to 20.3, update to version 20.3 or later. For Intel Quartus Prime Standard versions prior to 20.2, update to version 20.2 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾