CVE-2019-11092

CVE-2019-11092 affects Intel Open Cloud Integrity Technology (Open CIT) and OpenAttestation. Root cause: insufficient password protection in the attestation database, enabling an authenticated, local attacker to potentially disclose information. Impact: information disclosure with local access (M...

CVE-2019-0178: Insufficiently Protected Credentials

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0181: Undefined Security Weakness

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0175: Insufficiently Protected Credentials

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0177: Undefined Security Weakness

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0179: Insufficiently Protected Credentials

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0182: Insufficiently Protected Credentials

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0183: Insufficiently Protected Credentials

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0180: Insufficiently Protected Credentials

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-11092: Insufficiently Protected Credentials

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access...

PT-2019-2456 · Intel · Open Cloud Integrity Technology +1

Name of the Vulnerable Software and Affected Versions: Open Cloud Integrity Technology affected versions not specified OpenAttestation affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open CIT, which may allow an...

PT-2019-2399 · Open Cit · Open Cit

Name of the Vulnerable Software and Affected Versions: Open CIT affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open CIT, which may allow an authenticated user to potentially enable information disclosure via...

PT-2019-2402 · Intel · Open Cloud Integrity Technology +1

Name of the Vulnerable Software and Affected Versions: Open Cloud Integrity Technology affected versions not specified OpenAttestation affected versions not specified Description: The issue is related to errors in input validation in Open Cloud Integrity Technology and OpenAttestation. It may all...

PT-2019-2458 · Intel · Open Cloud Integrity Technology

Name of the Vulnerable Software and Affected Versions: Open Cloud Integrity Technology affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open Cloud Integrity Technology. This may allow an authenticated user to...

PT-2019-2400 · Open Cit · Open Cit

Name of the Vulnerable Software and Affected Versions: Open CIT affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open CIT, which may allow an authenticated user to potentially enable information disclosure via...

PT-2019-2398 · Intel · Open Cloud Integrity Technology

Name of the Vulnerable Software and Affected Versions: Open Cloud Integrity Technology affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open Cloud Integrity Technology, which may allow an authenticated user to...

PT-2019-2401 · Openattestation · Openattestation +1

Name of the Vulnerable Software and Affected Versions: Open CIT affected versions not specified Description: The issue is related to insufficient password protection in the attestation database, which may allow an authenticated user to potentially enable information disclosure via local access. I...

PT-2019-2457 · Open Cit · Open Cit

Name of the Vulnerable Software and Affected Versions: Open CIT affected versions not specified Description: The issue is related to insufficient password protection in the attestation database for Open CIT, which may allow an authenticated user to potentially enable information disclosure via...

Exploit for CVE-2018-6622

,----------------, ,------...

CoalfireOne Special Notes

PCI-DSS can be challenging to navigate - particularly when it comes to the ASV scanning requirements. While fulfilling the scanning requirement is easy, obtaining a passing attestation report may involve more than simply remediating failed findings. One requirement that we receive many questions...