Description
Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access.
Metrics
CVSS 3.1 7.5/10
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:NWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Feb 14, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed