CVE-2024-28885CWE-203

Observable discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access

High · published November 13, 2024

CVSS v4.0
8.2
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

Observable discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00429 · 36.1th percentile
Weakness
CWE-203 · Observable Discrepancy
Published
2024-11-13T21:10Z
EPSS history
Timeline
  • 13 NOV 21:10Z
    Observable discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access
    cvelistv5