{"id":"CVE-2025-27707","state":"PUBLISHED","title":"Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an authenticate","description":"Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access.","publishedAt":"2025-08-12T16:59:33.769Z","updatedAt":"2025-08-13T20:15:00.545Z","severity":{"score":2.1,"label":"Low","version":"4.0","vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L","source":"intel"},"assigner":"intel","products":["n/a Edge Orchestrator software"],"affected":[{"vendor":"n/a","product":"Edge Orchestrator software","defaultStatus":"unaffected","versions":[{"version":"before version 24.11.1 for Intel® Tiber™ Edge Platform","status":"affected"}]}],"references":["https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:08:47.682Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/27xxx/CVE-2025-27707.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-27707","state":"PUBLISHED","datePublished":"2025-08-12T16:59:33.769Z","dateUpdated":"2025-08-13T20:15:00.545Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2025-03-06T04:00:37.971Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access."}],"affected":[{"vendor":"n/a","product":"Edge Orchestrator software","defaultStatus":"unaffected","versions":[{"version":"before version 24.11.1 for Intel® Tiber™ Edge Platform","status":"affected"}]}],"references":[{"url":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html","name":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":2.6,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"cvssV4_0":{"version":"4.0","baseScore":2.1,"baseSeverity":"LOW","vectorString":"CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L","attackVector":"ADJACENT","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"LOW"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Denial of Service"},{"cweId":"CWE-200","lang":"en","description":"Exposure of Sensitive Information to an Unauthorized Actor","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2025-08-12T16:59:33.769Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-08-13T19:54:34.730096Z","id":"CVE-2025-27707","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-08-13T20:15:00.545Z"}}]}}}