2 lines
4.3 KiB
JSON
2 lines
4.3 KiB
JSON
{"affected":[{"affectedData":[{"product":"Intel(R) IPP","vendor":"n/a","versions":[{"status":"affected","version":"before version 2020 update 1"}]}],"source":"secure@intel.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:intel:integrated_performance_primitives_cryptography:2019:-:*:*:*:*:*:*","matchCriteriaId":"C228B092-D84F-4A92-B9A7-C85E069ACE04","vulnerable":true},{"criteria":"cpe:2.3:a:intel:integrated_performance_primitives_cryptography:2019:update_1:*:*:*:*:*:*","matchCriteriaId":"1D59D26E-C3A9-425D-BF47-9F100406B55C","vulnerable":true},{"criteria":"cpe:2.3:a:intel:integrated_performance_primitives_cryptography:2019:update_2:*:*:*:*:*:*","matchCriteriaId":"A5E59DAE-EDD5-41E2-81EB-68CCEE6111C4","vulnerable":true},{"criteria":"cpe:2.3:a:intel:integrated_performance_primitives_cryptography:2019:update_3:*:*:*:*:*:*","matchCriteriaId":"43B76D8D-6BF9-4468-896B-C41E777E2B19","vulnerable":true},{"criteria":"cpe:2.3:a:intel:integrated_performance_primitives_cryptography:2019:update_4:*:*:*:*:*:*","matchCriteriaId":"46B03979-727A-4230-8B35-7BC9F4C24D7C","vulnerable":true},{"criteria":"cpe:2.3:a:intel:integrated_performance_primitives_cryptography:2020:-:*:*:*:*:*:*","matchCriteriaId":"6FCBAD61-98CA-4FC4-B748-E2367EF8D4C4","vulnerable":true},{"criteria":"cpe:2.3:a:intel:sgx_dcap:*:*:*:*:*:linux:*:*","matchCriteriaId":"051C831D-C8FB-41F5-B2B9-152C7B7FE66D","versionEndIncluding":"1.10.100.4","vulnerable":true},{"criteria":"cpe:2.3:a:intel:sgx_dcap:*:*:*:*:*:windows:*:*","matchCriteriaId":"7D87FA8C-54D8-4C79-9A46-59563B6A1B05","versionEndIncluding":"1.10.100.4","vulnerable":true},{"criteria":"cpe:2.3:a:intel:sgx_psw:*:*:*:*:*:windows:*:*","matchCriteriaId":"0347067C-4AEC-4F6A-B35B-21671FC553F4","versionEndIncluding":"2.12.100.4","vulnerable":true},{"criteria":"cpe:2.3:a:intel:sgx_psw:*:*:*:*:*:linux:*:*","matchCriteriaId":"6BEB7E68-4C75-42E4-AF30-4643CF166F70","versionEndIncluding":"2.13.100.4","vulnerable":true},{"criteria":"cpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:windows:*:*","matchCriteriaId":"B5717416-A859-45C8-BBF1-F33AF80536B3","versionEndIncluding":"2.12.100.4","vulnerable":true},{"criteria":"cpe:2.3:a:intel:sgx_sdk:*:*:*:*:*:linux:*:*","matchCriteriaId":"3643652F-9986-48AB-A479-91BC7AFB2847","versionEndIncluding":"2.13.100.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access."},{"lang":"es","value":"Una discrepancia de tiempo observable en Intel® IPP versiones anteriores a 2020 update 1, puede permitir a un usuario autorizado permitir potencialmente una divulgación de información por medio de un acceso local"}],"id":"CVE-2021-0001","lastModified":"2026-06-17T03:28:57.230","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.1,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.0,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-06-09T20:15:08.180","references":[{"source":"secure@intel.com","tags":["Patch","Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00477.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00477.html"}],"sourceIdentifier":"secure@intel.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-203"}],"source":"nvd@nist.gov","type":"Primary"}]}
|