Lucene search

GoogleOSV:CVE-2022-37409

HistoryMay 10, 2023 - 2:15 p.m.

CVE-2022-37409

2023-05-1014:15:13

Google

osv.dev

intel ipp cryptography

control flow management

information disclosure

authenticated user

local access

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Insufficient control flow management for the Intel® IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access.

CPENameOperatorVersion
ipp-cryptoeqippcp_2020u2
ipp-cryptoeqippcp_2019b_r

CPE	Name	Operator	Version
	ipp-crypto	eq	ippcp_2020u2
	ipp-crypto	eq	ippcp_2019b_r

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00788.html

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for OSV:CVE-2022-37409