cvelist/2019/14xxx/CVE-2019-14565.json

{
    "data_type": "CVE",
    "data_format": "MITRE",
    "data_version": "4.0",
    "CVE_data_meta": {
        "ID": "CVE-2019-14565",
        "ASSIGNER": "secure@intel.com",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "Intel",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "2019.2 IPU \u2013 Intel(R) SGX",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "See provided reference"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "Escalation of Privilege, Denial of Service, Information Disclosure"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "MISC",
                "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html",
                "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html"
            },
            {
                "refsource": "CONFIRM",
                "name": "https://support.f5.com/csp/article/K57201259?utm_source=f5support&utm_medium=RSS",
                "url": "https://support.f5.com/csp/article/K57201259?utm_source=f5support&utm_medium=RSS"
            }
        ]
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access."
            }
        ]
    }
}