Lucene search
IntelCVELIST:CVE-2022-21163HistoryFeb 16, 2023 - 8:00 p.m.
CVE-2022-21163
2023-02-1620:00:23
intel
www.cve.org
1
access control
intel sgx
crypto api
escalation of privilege
CVSS3
8.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
AI Score
8.7
Confidence
High
EPSS
0
Percentile
9.0%
Improper access control in the Crypto API Toolkit for Intel® SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access.
CNA Affected
[
{
"vendor": "n/a",
"product": "Crypto API Toolkit for Intel(R) SGX",
"versions": [
{
"version": "before version 2.0 commit ID 91ee496",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
intel
intel
Crypto API Toolkit for Intel® SGX Advisory
2023-02-14 00:00:00
f5
f5
K000133317 : Intel software vulnerability CVE-2022-21163
2023-04-03 00:00:00
nvd
nvd
CVE-2022-21163
2023-02-16 21:15:11
prion
prion
Improper access control
2023-02-16 21:15:00
cve
cve
CVE-2022-21163
2023-02-16 21:15:11
CVSS3
8.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
AI Score
8.7
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVELIST:CVE-2022-21163