cvelist/2019/11xxx/CVE-2019-11163.json

{
    "data_type": "CVE",
    "data_format": "MITRE",
    "data_version": "4.0",
    "CVE_data_meta": {
        "ID": "CVE-2019-11163",
        "ASSIGNER": "secure@intel.com",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "n/a",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Intel(R) Processor Identification Utility for Windows* Advisory",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "Versions before 6.1.0731"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "Escalation of Privilege, Denial of Service, Information Disclosure"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "CONFIRM",
                "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00281.html",
                "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00281.html"
            }
        ]
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "Insufficient access control in a hardware abstraction driver for Intel(R) Processor Identification Utility for Windows before version 6.1.0731 may allow an authenticated user to potentially enable escalation of privilege, denial of service or information disclosure via local access."
            }
        ]
    }
}