CVE-2023-27502

Published: Mar 14, 2024Modified: Jun 17, 2026Deferred

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: secure@intel.com (Secondary)

Description

Insertion of sensitive information into log file for some Intel(R) Local Manageability Service software before version 2316.5.1.2 may allow an authenticated user to potentially enable information disclosure via local access.

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00923.html

Source: secure@intel.com

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00923.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.