ASA-2019-00342 – Intel Open Cloud Integrity Technology (Open CIT): Insufficient password protection in the attestation database


Allele Security Alert

ASA-2019-00342

Identifier(s)

ASA-2019-00342, CVE-2019-0179, INTEL-SA-00248

Title

Insufficient password protection in the attestation database

Vendor(s)

Intel

Product(s)

Intel Open Cloud Integrity Technology (Open CIT)

Affected version(s)

Intel Open Cloud Integrity Technology (Open CIT) all versions

Fixed version(s)

Intel recommends users of Open Cloud Integrity Technology (Open CIT) discontinue use and move to Intel® Security Libraries for Data Center (Intel® SecL-DC).

Proof of concept

Unknown

Description

Insufficient password protection in the attestation database for Intel Open Cloud Integrity Technology (Open CIT) may allow an authenticated user to potentially enable information disclosure via local access.

Technical details

Unknown

Credits

Unknown

Reference(s)

Open Cloud Integrity Technology and OpenAttestation Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00248.html

Intel® Security Libraries for Data Center (Intel® SecL-DC)
https://01.org/intel-secl

CVE-2019-0179
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0179

CVE-2019-0179
https://nvd.nist.gov/vuln/detail/CVE-2019-0179

If there is any error in this alert or you wish a comprehensive analysis, let us know.

Last modified: June 14, 2019

We are not responsible for any data loss, device corruption or any other type of issue due to the use of any information mentioned in our security alerts.