Lucene search

K
nvd[email protected]NVD:CVE-2023-24478
HistoryAug 15, 2023 - 1:15 p.m.

CVE-2023-24478

2023-08-1513:15:09
CWE-330
web.nvd.nist.gov
intel agilex
information disclosure
software vulnerability
quartus prime pro edition
linux

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Use of insufficiently random values for some Intel Agilexยฎ software included as part of Intelยฎ Quartusยฎ Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access.

Affected configurations

NVD
Node
intelquartus_primeRange<22.4pro

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for NVD:CVE-2023-24478