{ "id": "CVE-2019-0127", "sourceIdentifier": "secure@intel.com", "published": "2019-02-18T17:29:00.907", "lastModified": "2020-08-24T17:37:01.140", "vulnStatus": "Analyzed", "descriptions": [ { "lang": "en", "value": "Logic error in the installer for Intel(R) OpenVINO(TM) 2018 R3 and before for Linux may allow a privileged user to potentially enable information disclosure via local access." }, { "lang": "es", "value": "Un error de l\u00f3gica en el instalador para Intel \u00ae OpenVINO (\u2122) 2018, en distribuciones R3 y anteriores para Linux, podr\u00eda permitir a un usuario privilegiado habilitar una divulgaci\u00f3n de informaci\u00f3n mediante un acceso local." } ], "metrics": { "cvssMetricV30": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.0", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attackVector": "PHYSICAL", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 3.9, "baseSeverity": "LOW" }, "exploitabilityScore": 0.3, "impactScore": 3.6 } ], "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector": "LOCAL", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1 }, "baseSeverity": "LOW", "exploitabilityScore": 3.9, "impactScore": 2.9, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ] } ], "configurations": [ { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:intel:openvino:2018:r1.1:*:*:*:*:*:*", "matchCriteriaId": "1E073DB8-1EBC-4AB0-89B5-5E3673B2452F" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:openvino:2018:r1.2:*:*:*:*:*:*", "matchCriteriaId": "419B193C-BCCA-4C64-80FF-8FC58593E594" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:openvino:2018:r2:*:*:*:*:*:*", "matchCriteriaId": "88831278-DADC-44ED-AD8F-B34E561CB08B" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:openvino:2018:r3:*:*:*:*:*:*", "matchCriteriaId": "6EF8167A-3FBC-4C4F-91CC-E322E0B304F9" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" } ] } ] } ], "references": [ { "url": "http://www.securityfocus.com/bid/107110", "source": "secure@intel.com", "tags": [ "VDB Entry", "Third Party Advisory" ] }, { "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00222.html", "source": "secure@intel.com", "tags": [ "Vendor Advisory" ] } ] }