CVE-2022-46646

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Exposure of sensitive information to an unauthorized actor for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	Intel Unison software	See references

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.htmlVendor Advisory

Timeline

Published: Nov 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-466475.5Insertion of sensitive information into log file for some Intel Unison software may allow an authenticated user to potentially enable inform CVE-2022-466488.0ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repos CVE-2022-466498.8Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary she CVE-2022-46658.8Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.CVE-2022-466504.9Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials CVE-2022-466516.5Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive informat CVE-2022-466567.8Insecure inherited permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially CVE-2022-466589.8The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution.CVE-2022-46665.4The Markup (JSON-LD) structured in schema.org WordPress plugin through 4.8.1 does not validate and escape some of its shortcode attributes b CVE-2022-466606.5An unauthorized user could alter or write files with full control over the path and content of the file.CVE-2022-466626.7Roxio Creator LJB starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquote CVE-2022-466637.5In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.