Insecure Information Storage in Intel DCM Software
CVE-2022-44619

8.2HIGH

Key Information:

Vendor
Intel
Status
Intel(r) Dcm Software
Vendor
CVE Published:
10 May 2023

Summary

The Intel Data Center Manager (DCM) software prior to version 5.1 suffers from an insecure storage vulnerability that may allow authenticated users to escalate their privileges through local access. This flaw can potentially expose sensitive information stored within the system, allowing malicious actors to gain unauthorized access and control over affected environments. Organizations using Intel DCM should ensure they are running the latest version to mitigate this vulnerability.

Affected Version(s)

Intel(R) DCM software before version 5.1

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.