PT-2020-4944
CVE-2020-24454
·
Published
2020-11-10
·
Updated
2020-12-01
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Intel Quartus Prime Pro versions prior to 20.3
Intel Quartus Prime Standard versions prior to 20.2
Description:
The issue is related to improper restriction of XML external entity references, which could allow a remote attacker to gain unauthorized access to protected information. This may enable information disclosure via network access.
Recommendations:
For Intel Quartus Prime Pro versions prior to 20.3, update to version 20.3 or later.
For Intel Quartus Prime Standard versions prior to 20.2, update to version 20.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾