Information Disclosure Risk in Open Enclave SDK by Microsoft
CVE-2019-0876

5.5MEDIUM

Key Information:

Vendor
Microsoft
Status
Open Enclave Sdk
Vendor
CVE Published:
9 April 2019

Summary

An information disclosure vulnerability has been identified in certain versions of the Open Enclave SDK, where improper handling of objects in memory could lead to unauthorized access to sensitive information. This flaw allows an attacker to exploit the system, potentially exposing confidential data that can be leveraged for further attacks. Users are advised to update to the latest version to mitigate this risk.

Affected Version(s)

Open Enclave SDK = unspecified

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_MISC
http://www.securityfocus.com/bid/107743
vdb-entryx_refsource_BID

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.