Allele Security Alert
ASA-2019-00347
Identifier(s)
ASA-2019-00347, CVE-2019-0181, INTEL-SA-00248
Title
Improper input validation in the database
Vendor(s)
Intel
Product(s)
Intel Open Cloud Integrity Technology (Open CIT)
Intel OpenAttestation
Affected version(s)
Intel Open Cloud Integrity Technology (Open CIT) all versions
OpenAttestation all versions
Fixed version(s)
Intel recommends users of Intel Open Cloud Integrity Technology (Open CIT) and OpenAttestation discontinue use and move to Intel® Security Libraries for Data Center (Intel® SecL-DC).
Proof of concept
Unknown
Description
Improper input validation in the database for Open Cloud Integrity Technology (Open CIT) and OpenAttestation may allow a privileged user to potentially enable escalation of privilege via local access.
Technical details
Unknown
Credits
Unknown
Reference(s)
Open Cloud Integrity Technology and OpenAttestation Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00248.html
Intel® Security Libraries for Data Center (Intel® SecL-DC)
https://01.org/intel-secl
CVE-2019-0181
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0181
CVE-2019-0181
https://nvd.nist.gov/vuln/detail/CVE-2019-0181
If there is any error in this alert or you wish a comprehensive analysis, let us know.
Last modified: June 14, 2019