CVE-2023-32283CWE-532

Insertion of sensitive information into log file in some Intel(R) On Demand software before versions 1.16.2, 2.1.1, 3.1.0 may allow an authenticated user to…

Medium · published November 14, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
12.1
In the wild
Unconfirmed
What it is

Insertion of sensitive information into log file in some Intel(R) On Demand software before versions 1.16.2, 2.1.1, 3.1.0 may allow an authenticated user to potentially enable information disclosure via local access.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.1th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2023-11-14T19:04Z
EPSS history
Timeline
  • 14 NOV 19:04Z
    Insertion of sensitive information into log file in some Intel(R) On Demand software before versions 1.16.2, 2.1.1, 3.1.0 may allow an authenticated user to…
    cvelistv5