{"id":"CVE-2022-21163","state":"PUBLISHED","title":"Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privileg","description":"Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access.","publishedAt":"2023-02-16T20:00:23.821Z","updatedAt":"2025-01-27T18:14:37.734Z","severity":{"score":8.4,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","source":"intel"},"assigner":"intel","products":["n/a Crypto API Toolkit for Intel(R) SGX"],"affected":[{"vendor":"n/a","product":"Crypto API Toolkit for Intel(R) SGX","defaultStatus":"unaffected","versions":[{"version":"before version 2.0 commit ID 91ee496","status":"affected"}]}],"references":["http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:35.025Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/21xxx/CVE-2022-21163.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-21163","state":"PUBLISHED","datePublished":"2023-02-16T20:00:23.821Z","dateUpdated":"2025-01-27T18:14:37.734Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2021-12-09T23:41:07.393Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access."}],"affected":[{"vendor":"n/a","product":"Crypto API Toolkit for Intel(R) SGX","defaultStatus":"unaffected","versions":[{"version":"before version 2.0 commit ID 91ee496","status":"affected"}]}],"references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":8.4,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"escalation of privilege"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-02-16T20:00:23.821Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T02:31:59.645Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-27T17:29:18.895462Z","id":"CVE-2022-21163","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-27T18:14:37.734Z"}}]}}}