Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:27872
HistoryNov 12, 2020 - 7:53 a.m.

Information Disclosure

2020-11-1207:53:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

JSON

microcode is vulnerable to information disclosure. Confidential information is not properly removed before storage and during transfer allows a local user to access the confidential information.

Related

prion 1
amazon 1
nessus 63
ubuntucve 1
cve 1
redhatcve 1
debiancve 1
openvas 16
intel 1
f5 1
redhat 22
archlinux 1
mageia 2
fedora 3
cloudfoundry 3
citrix 1
suse 2
osv 5
ubuntu 3
centos 2
debian 1
oraclelinux 5
almalinux 1
rocky 1
lenovo 1
hp 1
prion
prion
Input validation
2020-11-12 18:15:00
amazon
amazon
Medium: microcode_ctl
2021-06-16 20:37:00
nessus
nessus
Amazon Linux 2 : microcode_ctl (ALAS-2021-1663)
2021-06-23 00:00:00
NewStart CGSL MAIN 6.02 : microcode_ctl Vulnerability (NS-SA-2021-0134)
2021-10-27 00:00:00
Oracle Linux 6 : microcode_ctl (ELSA-2020-5084)
2020-11-17 00:00:00
ubuntucve
ubuntucve
CVE-2020-8696
2020-11-10 00:00:00
cve
cve
CVE-2020-8696
2020-11-12 18:15:00
redhatcve
redhatcve
CVE-2020-8696
2021-08-01 16:11:20
debiancve
debiancve
CVE-2020-8696
2020-11-12 18:15:00
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0140)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-4628-3)
2021-05-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:3372-1)
2021-06-09 00:00:00
intel
intel
2020.2 IPU - Intel® Processor Advisory
2021-02-16 00:00:00
f5
f5
K63290144 : Intel processor vulnerabilities CVE-2020-8696 and CVE-2020-8698
2020-11-20 00:00:00
redhat
redhat
(RHSA-2020:5189) Moderate: microcode_ctl security, bug fix and enhancement update
2020-11-23 18:41:54
(RHSA-2020:5084) Moderate: microcode_ctl security, bug fix, and enhancement update
2020-11-11 09:27:51
(RHSA-2020:5184) Moderate: microcode_ctl security, bug fix and enhancement update
2020-11-23 17:19:29
archlinux
archlinux
[ASA-202102-34] intel-ucode: information disclosure
2021-02-27 00:00:00
mageia
mageia
Updated microcode package fixes security vulnerabilities
2021-03-17 09:16:07
Updated microcode package fixes security vulnerabilities
2020-11-14 00:20:36
fedora
fedora
[SECURITY] Fedora 33 Update: microcode_ctl-2.1-43.fc33
2020-11-22 01:27:43
[SECURITY] Fedora 31 Update: microcode_ctl-2.1-39.2.fc31
2020-11-20 01:29:29
[SECURITY] Fedora 32 Update: microcode_ctl-2.1-39.3.fc32
2020-11-29 01:15:00
cloudfoundry
cloudfoundry
USN-4628-2: Intel Microcode regression | Cloud Foundry
2020-12-11 00:00:00
USN-4628-3: Intel Microcode vulnerabilities | Cloud Foundry
2021-06-11 00:00:00
USN-4628-1: Intel Microcode vulnerabilities | Cloud Foundry
2020-12-11 00:00:00
citrix
citrix
Citrix Hypervisor Security Update
2020-11-12 04:00:00
suse
suse
Security update for ucode-intel (important)
2020-11-29 00:00:00
Security update for ucode-intel (important)
2020-11-27 00:00:00
osv
osv
intel-microcode - security update
2021-02-06 00:00:00
intel-microcode vulnerabilities
2020-11-11 06:56:58
intel-microcode regression
2020-11-12 01:14:30
ubuntu
ubuntu
Intel Microcode regression
2020-11-12 00:00:00
Intel Microcode vulnerabilities
2021-05-17 00:00:00
Intel Microcode vulnerabilities
2020-11-11 00:00:00
centos
centos
microcode_ctl security update
2020-11-19 13:47:47
microcode_ctl security update
2021-08-09 15:29:53
debian
debian
[SECURITY] [DLA 2546-1] intel-microcode security update
2021-02-05 18:48:10
oraclelinux
oraclelinux
microcode_ctl security, bug fix and enhancement update
2020-11-17 00:00:00
microcode_ctl security, bug fix, and enhancement update
2020-11-17 00:00:00
microcode_ctl security, bug fix, and enhancement update
2020-11-17 00:00:00
almalinux
almalinux
Important: microcode_ctl security, bug fix and enhancement update
2021-08-09 09:19:57
rocky
rocky
microcode_ctl security, bug fix and enhancement update
2021-08-09 09:19:57
lenovo
lenovo
Multi-vendor BIOS Security Vulnerabilities (November 2020) - Lenovo Support NL
2020-11-04 15:47:25
hp
hp
HPSBHF03705 rev. 6 - BIOS November 2020 Security Updates
2020-11-09 00:00:00

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

JSON
Related for VERACODE:27872
prion1amazon1nessus63ubuntucve1cve1redhatcve1debiancve1openvas16intel1f51redhat22archlinux1mageia2fedora3cloudfoundry3citrix1suse2osv5ubuntu3centos2debian1oraclelinux5almalinux1rocky1lenovo1hp1