Allele Security Alert
ASA-2019-00343
Identifier(s)
ASA-2019-00343, CVE-2019-0180, INTEL-SA-00248
Title
Insufficient password protection in the attestation database
Vendor(s)
Intel
Product(s)
Intel Open Cloud Integrity Technology (Open CIT)
Affected version(s)
Intel Open Cloud Integrity Technology (Open CIT) all versions
Fixed version(s)
Intel recommends users of Open Cloud Integrity Technology (Open CIT) discontinue use and move to Intel® Security Libraries for Data Center (Intel® SecL-DC).
Proof of concept
Unknown
Description
Insufficient password protection in the configuration files for Open Cloud Integrity Technology (Open CIT) may allow an authenticated user to potentially enable information disclosure via local access.
Technical details
Unknown
Credits
Unknown
Reference(s)
Open Cloud Integrity Technology and OpenAttestation Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00248.html
Intel® Security Libraries for Data Center (Intel® SecL-DC)
https://01.org/intel-secl
CVE-2019-0180
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0180
CVE-2019-0180
https://nvd.nist.gov/vuln/detail/CVE-2019-0180
If there is any error in this alert or you wish a comprehensive analysis, let us know.
Last modified: June 14, 2019