PT-2023-14282 · Intel · Intel Unison

Published 2023-11-14 · Updated 2023-11-17 · CVE-2022-43666

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Unison software (affected versions not specified)

Description The issue concerns exposure of sensitive system information due to uncleared debug information in Intel Unison software. This may allow an authenticated user to potentially enable information disclosure via local access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1258

Related Identifiers

CVE-2022-43666

Affected Products

Intel Unison

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-43666 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-43666 · Vendor Advisory