CVE-2023-22447

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published: May 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-224487.2Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of privilege via network CVE-2023-224496.7Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via l CVE-2023-22456.3A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor CVE-2023-224507.2In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP CVE-2023-224518.8Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or change passwords, the CVE-2023-224526.5kenny2automate is a Discord bot. In the web interface for server settings, form elements were generated with Discord channel IDs as part of CVE-2023-224535.3Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` and CVE-2023-224546.1Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` and CVE-2023-224556.1Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` and CVE-2023-224566.1ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versio CVE-2023-224578.8CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he `CKEditor.HTMLConverter` document CVE-2023-224585.5Redis is an in-memory database that persists on disk. Authenticated users can issue a `HRANDFIELD` or `ZRANDMEMBER` command with specially c