cvelist/2019/14xxx/CVE-2019-14566.json

{
    "data_type": "CVE",
    "data_format": "MITRE",
    "data_version": "4.0",
    "CVE_data_meta": {
        "ID": "CVE-2019-14566",
        "ASSIGNER": "secure@intel.com",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "Intel",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "2019.2 IPU \u2013 Intel(R) SGX",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "See provided reference"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "Escalation of Privilege, Denial of Service, Information Disclosure"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "MISC",
                "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html",
                "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html"
            },
            {
                "refsource": "CONFIRM",
                "name": "https://support.f5.com/csp/article/K57201259?utm_source=f5support&utm_medium=RSS",
                "url": "https://support.f5.com/csp/article/K57201259?utm_source=f5support&utm_medium=RSS"
            }
        ]
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access."
            }
        ]
    }
}