Lucene search

K
cveIntelCVE-2018-12193
HistoryOct 10, 2018 - 6:29 p.m.

CVE-2018-12193

2018-10-1018:29:04
intel
web.nvd.nist.gov
63
cve-2018-12193
access control
driver stack
intel quickassist technology
linux
information disclosure
nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0

Percentile

12.6%

Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4.2 may allow an unprivileged user to potentially disclose information via local access.

Affected configurations

Nvd
Node
intelquickassist_technologyRange<4.2linux
VendorProductVersionCPE
intelquickassist_technology*cpe:2.3:a:intel:quickassist_technology:*:*:*:*:*:linux:*:*

CNA Affected

[
  {
    "product": "Intel QuickAssit Technology for Linux",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "before 4.2"
      }
    ]
  }
]

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0

Percentile

12.6%

Related for CVE-2018-12193