CVE-2021-0131

2021-06-0919:10:41

intel

www.cve.org

cryptographically weak

pseudo-random number generator

information disclosure

network access

authenticated user

cve-2021-0131

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel® Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access.

CNA Affected

[
  {
    "product": "Intel(R) Security Library",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before version 3.3"
      }
    ]
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00521.html