VulnerabilityModified

CVE-2020-12308

Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information disclosure via network access.

MEDIUM 6.5EPSS 0.87%

Does this matter?

Lower severity and a low EPSS score (0.87%). Track it; it rarely justifies an emergency change on its own.

Description

Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information disclosure via network access.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.87% probability · 57th percentile
CISA KEV: Not listed
Affected: intel/computing improvement program
Source: secure@intel.com

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00410Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00410Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.