PT-2023-23699 · Intel · Intel On Demand

Marcin Kolasinski · Publicado 2023-11-14 · Atualizado 2023-11-21 · CVE-2023-32283

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) On Demand software versions prior to 1.16.2 Intel(R) On Demand software versions prior to 2.1.1 Intel(R) On Demand software versions prior to 3.1.0

Description The issue involves the insertion of sensitive information into a log file in Intel(R) On Demand software, potentially allowing an authenticated user to enable information disclosure via local access.

Recommendations For versions prior to 1.16.2, update to version 1.16.2 or later. For versions prior to 2.1.1, update to version 2.1.1 or later. For versions prior to 3.1.0, update to version 3.1.0 or later.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2023-32283

Produtos afetados

Intel On Demand

Referências · 4

• https://osv.dev/vulnerability/CVE-2023-32283 · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00914.html · Aviso do Fabricante
• https://t.me/cvenotify/60952 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-32283 · Nota de Segurança