Lucene search

IntelCVE-2022-45109

HistoryNov 14, 2023 - 7:15 p.m.

CVE-2022-45109

2023-11-1419:15:14

CWE-665

intel

web.nvd.nist.gov

cve-2022-45109

intel unison

information disclosure

local access

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

Percentile

9.0%

JSON

Improper initialization for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access.

Affected configurations

Nvd

Node

microsoftwindowsMatch-

AND

intelunison_softwareRange<20.14.5683.0

Node

googleandroidMatch-

AND

intelunison_softwareRange<20.14.4244

Node

appleiphone_osMatch-

AND

intelunison_softwareRange<20.14.2.3053

VendorProductVersionCPE
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
intelunison_software*cpe:2.3:a:intel:unison_software:*:*:*:*:*:*:*:*
googleandroid-cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
appleiphone_os-cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*
intel	unison_software	*	cpe:2.3:a:intel:unison_software::::::::
google	android	-	cpe:2.3:o:google:android:-:::::::*
apple	iphone_os	-	cpe:2.3:o:apple:iphone_os:-:::::::*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel Unison software",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2022-45109