Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Una limpieza incompleta en operaciones específicas de escritura en registros especiales para algunos procesadores Intel(R) puede permitir que un usuario autenticado permita potencialmente la divulgación de información por medio de acceso local
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | NONE |
| Availability Impact | NONE |
AV:L/AC:L/Au:N/C:P/I:N/A:N
| Access Vector | LOCAL |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-459
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-459
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| xen | xen | * | <built-in method update of dict object at 0x7fd36ad4ca00> | Operating System |
| fedoraproject | fedora | 35 | <built-in method update of dict object at 0x7fd2d825ad40> | Operating System |
| fedoraproject | fedora | 36 | <built-in method update of dict object at 0x7fd369d6d7c0> | Operating System |
| intel | sgx_dcap | * | <built-in method update of dict object at 0x7fd2d825aa40> | Application |
| intel | sgx_dcap | * | <built-in method update of dict object at 0x7fd36ad4dfc0> | Application |
| intel | sgx_psw | * | <built-in method update of dict object at 0x7fd36ad4fa40> | Application |
| intel | sgx_psw | * | <built-in method update of dict object at 0x7fd3697d4880> | Application |
| intel | sgx_sdk | * | <built-in method update of dict object at 0x7fd36ada2180> | Application |
| intel | sgx_sdk | * | <built-in method update of dict object at 0x7fd2d8258cc0> | Application |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd36ad4c3c0> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd3697d5580> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd3697d6180> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd369d6de00> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd3697d4e00> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd3697d5c80> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd36a656bc0> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd3697d7f40> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd36ad4d140> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd2d8259540> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd37039a200> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd369d6e3c0> | Operating System |
| vmware | esxi | 7.0 | <built-in method update of dict object at 0x7fd3697d5740> | Operating System |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x7fd37039acc0> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7fd369d6f580> | Operating System |
| debian | debian_linux | 11.0 | <built-in method update of dict object at 0x7fd37039b9c0> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:intel:sgx_dcap:*:*:*:*:*:linux:*:* |
| Yes | cpe:2.3:a:intel:sgx_dcap:*:*:*:*:*:windows:*:* |
| Yes | cpe:2.3:a:intel:sgx_psw:*:*:*:*:*:windows:*:* |
| Yes | cpe:2.3:a:intel:sgx_psw:*:*:*:*:*:linux:*:* |
| Yes | cpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:windows:*:* |
| Yes | cpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:linux:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:* |
| Yes | cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |