CVE-2022-25899

Published: Aug 18, 2022Modified: Feb 25, 2025

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected (2)

Products: Intel: Open Active Management Technology Cloud Toolkit

Intel

1 product

Open Active Management Technology Cloud Toolkit

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Intel Open Active Management Technology Cloud Toolkit	Before 2.0.2
Intel Open Active Management Technology Cloud Toolkit	From 2.2.0 to 2.2.2

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html

Source: secure@intel.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.