PT-2020-1430 · Intel · Intel Daal

Published 2020-01-14 · Updated 2020-08-24 · CVE-2019-14629

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) DAAL versions prior to 2020 Gold

Description The issue is related to improper permissions in the Intel(R) DAAL library, which may allow an authenticated user to potentially enable information disclosure via local access. The vulnerability is associated with errors in processing permissions, and its exploitation may allow an attacker to disclose protected information.

Recommendations For versions prior to 2020 Gold, update to version 2020 Gold or later to resolve the issue.

Fix

Information Disclosure

Incorrect Permission

Weakness Enumeration

CWE-200

CWE-732

Related Identifiers

BDU:2020-00408

CVE-2019-14629

Affected Products

Intel Daal

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-14629 · Security Note
• https://bdu.fstec.ru/vul/2020-00408 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00332.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14629 · Vendor Advisory