CVE-2023-22447

    Dashboard / Vulnerabilities / CVE-2023-22447

    CVE-2023-22447

    Published: 10 May 2023Last Modified: 9 Jul 2026

    Summary:

    Details: Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access.

    References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00827.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -000de88affa44879904368c664f426155148b5cb

    Affected versions

    v22.6.1
    v22.6

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-22447 | CVE-DB