PT-2023-12663 · Intel · Crypto Api Toolkit For Intel Sgx

Sankaranarayanan Venkatasubramanian · Publicado 2023-02-16 · Atualizado 2023-08-08 · CVE-2022-21163

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Crypto API Toolkit for Intel(R) SGX versions prior to 2.0 commit ID 91ee496

Description The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For versions prior to 2.0 commit ID 91ee496, update to version 2.0 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2022-21163

Produtos afetados

Crypto Api Toolkit For Intel Sgx

Referências · 7

• https://t.me/cibsecurity/58413 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-21163 · Aviso do Fabricante
• https://t.me/cvenotify/45642 · Publicação no Telegram
• https://t.me/cvenotify/44519 · Publicação no Telegram
• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html · Aviso do Fabricante
• https://t.me/cvenotify/44564 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-21163 · Nota de Segurança