PT-2019-2401 · Openattestation · Openattestation+1

Published 2019-06-11 · Updated 2023-02-27 · CVE-2019-0175

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Open CIT (affected versions not specified)

Description The issue is related to insufficient password protection in the attestation database, which may allow an authenticated user to potentially enable information disclosure via local access. It is also described as a vulnerability in the OpenAttestation technology, associated with errors in the implementation of the host attestation process, allowing an attacker to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

CWE-264

Related Identifiers

BDU:2019-02177

CVE-2019-0175

Affected Products

Open Cit

Openattestation

References · 6

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00248.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-0175 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0175 · Security Note
• https://bdu.fstec.ru/vul/2019-02177 · Security Note
• https://t.me/cvenotify/45079 · Telegram Post
• https://vuldb.com/?id.136449 · Note