CVE-2020-8696

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-212

Affected software

Vendor	Product	Versions
n/a	Intel(R) Processors	See references

References

https://lists.debian.org/debian-lts-announce/2021/02/msg00007.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/
https://security.netapp.com/advisory/ntap-20201113-0006/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381Vendor Advisory
https://lists.debian.org/debian-lts-announce/2021/02/msg00007.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAAGIK5CXKBPGY3R4UR5VO56M7MKLZ43/
https://security.netapp.com/advisory/ntap-20201113-0006/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381Vendor Advisory

Timeline

Published: Nov 12, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-86985.5Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclos CVE-2020-87006.7Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privi CVE-2020-87016.7Incorrect default permissions in installer for the Intel(R) SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially CVE-2020-87027.3Uncontrolled search path element in the Intel(R) Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potent CVE-2020-87036.7Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14 CVE-2020-87046.4Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of CVE-2020-87056.8Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13 CVE-2020-87068.8Buffer overflow in a daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthentic CVE-2020-87078.8Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticat CVE-2020-87088.8Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated CVE-2020-87098.8Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow CVE-2020-87106.7Buffer overflow in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privil