Lucene search
IntelCVELIST:CVE-2022-40974HistoryMay 10, 2023 - 1:16 p.m.
CVE-2022-40974
2023-05-1013:16:53
CWE-459
intel
www.cve.org
4
intel ipp cryptography
incomplete cleanup
information disclosure
privileged user
local access
CVSS3
1.8
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N
AI Score
5.3
Confidence
High
EPSS
0
Percentile
9.0%
Incomplete cleanup in the Intel® IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable information disclosure via local access.
CNA Affected
[
{
"vendor": "n/a",
"product": "Intel(R) IPP Cryptography software",
"versions": [
{
"version": "before version 2021.6",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
nvd
nvd
CVE-2022-40974
2023-05-10 14:15:15
cve
cve
CVE-2022-40974
2023-05-10 14:15:15
prion
prion
Input validation
2023-05-10 14:15:00
osv
osv
CVE-2022-40974
2023-05-10 14:15:15
intel
intel
Intel® IPP Cryptography Advisory
2023-05-09 00:00:00
CVSS3
1.8
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N
AI Score
5.3
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVELIST:CVE-2022-40974