cvelist/2019/11xxx/CVE-2019-11162.json

{
    "data_type": "CVE",
    "data_format": "MITRE",
    "data_version": "4.0",
    "CVE_data_meta": {
        "ID": "CVE-2019-11162",
        "ASSIGNER": "secure@intel.com",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "n/a",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Intel(R) Computing Improvement Program Advisory",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "Versions before 2.4.0.04733"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "Escalation of Privilege, Denial of Service, Information Disclosure"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "CONFIRM",
                "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00283.html",
                "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00283.html"
            }
        ]
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "Insufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before version 2.4.0.04733 may allow an authenticated user to potentially enable escalation of privilege, denial of service or information disclosure via local access."
            }
        ]
    }
}