CVE-2019-11092

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0178

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0177

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0175

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0180

The CVE-2019-0180 issue affects Intel Open Cloud Integrity Technology (Open CIT) and OpenAttestation. Description: Insufficient password protection in the attestation database may allow an authenticated user to disclose information via local access. Root cause: weak/password protection in the att...

CVE-2019-0182

CVE-2019-0182 affects Open Cloud Integrity Technology (Open CIT) and OpenAttestation. The root cause is insufficient password protection in the attestation database, potentially enabling information disclosure via local access by an authenticated user. CVSS details in the Intel advisory indicate ...

CVE-2019-0177

CVE-2019-0177 concerns Open Cloud Integrity Technology (Open CIT) with an explicit root cause of insufficient password protection in the attestation database. The vulnerability could allow an authenticated user to cause information disclosure via local access. Related connected documents corrobor...

CVE-2019-0178

The CVE-2019-0178 entry concerns Open Cloud Integrity Technology (Open CIT) and OpenAttestation. An authenticated user could potentially disclose information due to insufficient password protection in the attestation database, enabling local access to sensitive data. Intel’s advisory (INTEL-SA-00...

PT-2019-2457 · Open Cit · Open Cit

Name of the Vulnerable Software and Affected Versions: Open CIT affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open CIT, which may allow an authenticated user to potentially enable information disclosure via...

PT-2019-2400 · Open Cit · Open Cit

Name of the Vulnerable Software and Affected Versions: Open CIT affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open CIT, which may allow an authenticated user to potentially enable information disclosure via...

PT-2019-2458 · Intel · Open Cloud Integrity Technology

Name of the Vulnerable Software and Affected Versions: Open Cloud Integrity Technology affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open Cloud Integrity Technology. This may allow an authenticated user to...

PT-2019-2399 · Open Cit · Open Cit

Name of the Vulnerable Software and Affected Versions: Open CIT affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open CIT, which may allow an authenticated user to potentially enable information disclosure via...

PT-2019-2398 · Intel · Open Cloud Integrity Technology

Name of the Vulnerable Software and Affected Versions: Open Cloud Integrity Technology affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open Cloud Integrity Technology, which may allow an authenticated user to...

PT-2019-2456 · Intel · Open Cloud Integrity Technology +1

Name of the Vulnerable Software and Affected Versions: Open Cloud Integrity Technology affected versions not specified OpenAttestation affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open CIT, which may allow an...

PT-2019-2402 · Intel · Open Cloud Integrity Technology +1

Name of the Vulnerable Software and Affected Versions: Open Cloud Integrity Technology affected versions not specified OpenAttestation affected versions not specified Description: The issue is related to errors in input validation in Open Cloud Integrity Technology and OpenAttestation. It may all...

PT-2019-2401 · Openattestation · Openattestation +1

Name of the Vulnerable Software and Affected Versions: Open CIT affected versions not specified Description: The issue is related to insufficient password protection in the attestation database, which may allow an authenticated user to potentially enable information disclosure via local access. I...

CoalfireOne Special Notes

PCI-DSS can be challenging to navigate - particularly when it comes to the ASV scanning requirements. While fulfilling the scanning requirement is easy, obtaining a passing attestation report may involve more than simply remediating failed findings. One requirement that we receive many questions...

Intel Software Guard Extensions (SGX) Vulnerabilities - Lenovo Support US

No description provided...

Intel Software Guard Extensions (SGX) Vulnerabilities - US

Lenovo Security Advisory: LEN-21284 Potential Impact: Elevation of privilege, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2017-5736, CVE-2018-3626, CVE-2018-3639, CVE-2018-3640, CVE-2018-3691 Summary Description: Intel has issued several advisories...

CVE-2018-6622

An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group TCG Trusted Platform Module TPM 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can...