Open Cloud Integrity Technology and OpenAttestation Advisory

🗓️ 11 Jun 2019 00:00:00Reported by Intel Security CenterType

Open CIT & OpenAttestation have vulnerabilities allowing information disclosure & privilege escalation via local access. Intel released updates to mitigate CVE-2019-0179, CVE-2019-0180, CVE-2019-0178, CVE-2019-0177, CVE-2019-0175, CVE-2019-0181, CVE-2019-0182, CVE-2019-0183 & CVE-2019-11092

Reporter	Title	Published	Views	Family All 84
BDU FSTEC	The vulnerability of the Open Cloud Integrity Technology, a tool for creating cloud services, is related to the “race-to-availability” scenario, which allows a attacker to expose protected information.	21 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Open Cloud Integrity Technology, a tool for creating cloud services, stems from deficiencies in access control within the certification database. This allows attackers to disclose protected information.	21 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Open Cloud Integrity Technology, a tool for creating cloud services, lies in the insufficient password protection in configuration files, which allows attackers to disclose sensitive information.	21 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Open Cloud Integrity Technology, a tool used for creating cloud services, stems from insufficient validation of input data during the host certification process. This allows attackers to disclose protected information.	21 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the OpenAttestation agent, related to errors in the implementation of the host attestation process, allows a violator to disclose the protected information.	21 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Open Cloud Integrity Technology, which is used to create cloud services, and the OpenAttestation agent, arises from errors in checking input data. This allows attackers to exploit these vulnerabilities to increase their privileges.	21 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Open Cloud Integrity Technology, which is used to create cloud services, and the OpenAttestation agent exists due to errors in path name restrictions for restricted access directories. This allows attackers to disclose protected information.	26 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Open Cloud Integrity Technology, which is used to create cloud services, and the OpenAttestation agent, arises from password handling issues during system login processes. This allows attackers to compromise the protected information.	26 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Open Cloud Integrity Technology, a tool for creating cloud services, stems from password handling flaws during system login processes. This allows attackers to compromise the protected information.	26 Jun 201900:00	–	bdu_fstec
CNVD	Intel Open Cloud Integrity Technology Information Disclosure Vulnerability	14 Jun 201900:00	–	cnvd

11 Jun 2019 00:00Current

5.3Medium risk

Vulners AI Score5.3

CVSS 24.6

CVSS 3.16.7

EPSS0.00337