← Back

CVE-2022-43666

nvd nist
Published: Nov 14, 2023Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access.

Affected (3)

Intel
1 product
Unison Software
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Unison Software
Before 20.14.5683.0
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Unison Software
Before 20.14.4244
Running on/withPlatform Versions
Google
Android
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Unison Software
Before 20.14.2.3053
Running on/withPlatform Versions
Apple
Iphone Os
All versions

Related CWEs

CWE-1258
Exposure of Sensitive System Information Due to Uncleared Debug Information
The hardware does not fully clear security-sensitive values, such as keys and intermediate values in cryptographic operations, when debug mode is entered.

References (2)

Source: secure@intel.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.