PT-2019-9554 · Intel · Intel Sgx Platform Software For Windows

Publicado 2019-01-10 · Atualizado 2019-10-03 · CVE-2018-18098

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) SGX SDK and Platform Software for Windows versions prior to 2.2.100

Description The issue is related to improper file verification in the install routine, which may allow an escalation of privilege via local access.

Recommendations For versions prior to 2.2.100, update to version 2.2.100 or later to resolve the issue.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-18098

Produtos afetados

Intel Sgx Platform Software For Windows

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-18098 · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00203.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-18098 · Nota de Segurança