Insufficient Password Protection in Open CIT Attestation Database by Intel
CVE-2019-0180

4.4MEDIUM

Key Information:

Vendor

Intel
Status
Open Cloud Integrity Technology And Openattestation
Vendor
CVE Published:
13 June 2019

What is CVE-2019-0180?

The Open CIT attestation database contains insufficient password protection that may allow authenticated users to enable information disclosure through local access. This vulnerability could expose sensitive information, posing a risk to the integrity and confidentiality of the system.

Affected Version(s)

Open Cloud Integrity Technology and OpenAttestation All versions of Open CIT and OpenAttestation.

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-0180 : Insufficient Password Protection in Open CIT Attestation Database by Intel