Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
References
Link | Resource |
---|---|
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00772.html | Patch Vendor Advisory |
Configurations
History
18 May 2023, 17:12
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00772.html - Patch, Vendor Advisory | |
CWE | CWE-668 | |
CPE | cpe:2.3:a:intel:data_center_manager:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
First Time |
Intel
Intel data Center Manager |
10 May 2023, 14:38
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-05-10 14:15
Updated : 2023-11-07 03:52
NVD link : CVE-2022-40210
Mitre link : CVE-2022-40210
JSON object : View
Products Affected
intel
- data_center_manager
CWE
CWE-668
Exposure of Resource to Wrong Sphere