CVE-2023-22447CWE-532

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to…

Low · published May 10, 2023

CVSS v3.1
2.0
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access.

The record
Technical detail
CVSS v3.1
2.0 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.0th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2023-05-10T13:17Z
EPSS history
Timeline
  • 10 MAY 13:17Z
    Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to…
    cvelistv5