ASA-2019-00348 – Intel Open Cloud Integrity Technology (Open CIT) and Intel OpenAttestation: Relative path traversal in the login routine

Allele Security Alert

ASA-2019-00348

Identifier(s)

ASA-2019-00348, CVE-2019-0182, INTEL-SA-00248

Title

Relative path traversal in the login routine

Vendor(s)

Intel

Product(s)

Intel Open Cloud Integrity Technology (Open CIT)
Intel OpenAttestation

Affected version(s)

All versions of Intel Open Cloud Integrity Technology (Open CIT) and OpenAttestation

Fixed version(s)

Intel recommends users of Intel Open Cloud Integrity Technology (Open CIT) and OpenAttestation discontinue use and move to Intel® Security Libraries for Data Center (Intel® SecL-DC).

Proof of concept

Unknown

Description

Relative path traversal in the login routine for Open Cloud Integrity Technology (Open CIT) and OpenAttestation may allow an authenticated user to potentially enable escalation of privilege via local access.

Technical details

Unknown

Credits

Unknown

Reference(s)

Open Cloud Integrity Technology and OpenAttestation Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00248.html

Intel® Security Libraries for Data Center (Intel® SecL-DC)
https://01.org/intel-secl

CVE-2019-0182
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0182

CVE-2019-0182
https://nvd.nist.gov/vuln/detail/CVE-2019-0182

If there is any error in this alert or you wish a comprehensive analysis, let us know.

Last modified: June 13, 2019

We are not responsible for any data loss, device corruption or any other type of issue due to the use of any information mentioned in our security alerts.