Allele Security Alert
ASA-2019-00348
Identifier(s)
ASA-2019-00348, CVE-2019-0182, INTEL-SA-00248
Title
Relative path traversal in the login routine
Vendor(s)
Intel
Product(s)
Intel Open Cloud Integrity Technology (Open CIT)
Intel OpenAttestation
Affected version(s)
All versions of Intel Open Cloud Integrity Technology (Open CIT) and OpenAttestation
Fixed version(s)
Intel recommends users of Intel Open Cloud Integrity Technology (Open CIT) and OpenAttestation discontinue use and move to Intel® Security Libraries for Data Center (Intel® SecL-DC).
Proof of concept
Unknown
Description
Relative path traversal in the login routine for Open Cloud Integrity Technology (Open CIT) and OpenAttestation may allow an authenticated user to potentially enable escalation of privilege via local access.
Technical details
Unknown
Credits
Unknown
Reference(s)
Open Cloud Integrity Technology and OpenAttestation Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00248.html
Intel® Security Libraries for Data Center (Intel® SecL-DC)
https://01.org/intel-secl
CVE-2019-0182
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0182
CVE-2019-0182
https://nvd.nist.gov/vuln/detail/CVE-2019-0182
If there is any error in this alert or you wish a comprehensive analysis, let us know.
Last modified: June 13, 2019