PT-2021-12921

Name of the Vulnerable Software and Affected Versions: IntelR Security Library versions prior to 3.3 Description: The issue is related to improper input validation in an API, which may allow a privileged user to potentially enable denial of service via network access. Recommendations: For version...

CVE-2021-0131: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Use of cryptographically weak pseudo-random number generator PRNG in an API for the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access...

CVE-2021-0134: Improper Input Validation

Improper input validation in an API for the IntelR Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access...

PT-2021-12918

Name of the Vulnerable Software and Affected Versions: IntelR Security Library versions prior to 3.3 Description: The issue is related to the use of a cryptographically weak pseudo-random number generator PRNG in an API. This may allow an authenticated user to potentially enable information...

PT-2021-12920

Name of the Vulnerable Software and Affected Versions: IntelR Security Library versions prior to 3.3 Description: The issue is related to key exchange without entity authentication, which may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2021-0133: Undefined Security Weakness

Key exchange without entity authentication in the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2021-0132: Missing Release of Resource after Effective Lifetime

Missing release of resource after effective lifetime in an API for the IntelR Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access...