CVE-2023-32283

2023-11-1419:15:25

CWE-532

[email protected]

web.nvd.nist.gov

cve-2023-32283

sensitive information

log file

version 1.16.2

version 2.1.1

version 3.1.0

authenticated user

information disclosure

local access

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

9.0%

JSON

Insertion of sensitive information into log file in some Intel® On Demand software before versions 1.16.2, 2.1.1, 3.1.0 may allow an authenticated user to potentially enable information disclosure via local access.

Affected configurations

Nvd

Node

intelon_demandMatch1.16.1.1

intelon_demandMatch2.1.0.1

intelon_demandMatch3.0.1.3

VendorProductVersionCPE
intelon_demand1.16.1.1cpe:2.3:a:intel:on_demand:1.16.1.1:*:*:*:*:*:*:*
intelon_demand2.1.0.1cpe:2.3:a:intel:on_demand:2.1.0.1:*:*:*:*:*:*:*
intelon_demand3.0.1.3cpe:2.3:a:intel:on_demand:3.0.1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	on_demand	1.16.1.1	cpe:2.3:a:intel:on_demand:1.16.1.1:::::::*
intel	on_demand	2.1.0.1	cpe:2.3:a:intel:on_demand:2.1.0.1:::::::*
intel	on_demand	3.0.1.3	cpe:2.3:a:intel:on_demand:3.0.1.3:::::::*