CVE-2022-42878
Assigner: intel
Published: 2023-05-10T13:16:43.137Z
State: PUBLISHED
problemTypes: descriptions: description: information disclosure
description: Null pointer dereference
cweId: CWE-395
type: CWE
affected: vendor: n/a
product: Intel(R) Trace Analyzer and Collector software
versions: version: before version 2021.8.0 published Dec 2022
status: affected
defaultStatus: unaffected
descriptions: value: Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access.
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
baseScore: 2.8
baseSeverity: LOW
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE