CVE-2019-0183

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-522

Affected software

Vendor	Product	Versions
n/a	Open Cloud Integrity Technology and OpenAttestation	All versions of Open CIT and OpenAttestation.

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00248.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00248.htmlVendor Advisory

Timeline

Published: Jun 13, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-01845.5Insufficient access control in protected memory subsystem for Intel(R) TXT for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor CVE-2019-01855.5Insufficient access control in protected memory subsystem for SMM for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor families;CVE-2019-01866.1The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XSS) attacks. Mitigati CVE-2019-01879.8Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). Attacker can establish a RMI connec CVE-2019-01887.5Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSO CVE-2019-01899.8The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the "webtools/control/httpService" CVE-2019-01907.5A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod CVE-2019-01916.5Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It the CVE-2019-01929.8In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By po CVE-2019-01937.2In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in whi CVE-2019-01947.5Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.CVE-2019-01959.8Manipulating classpath asset file URLs, an attacker could guess the path to a known file in the classpath and have it downloaded. If the att