Sign in Subscribe

← All advisories

Unrated severityNVD Advisory· Published Nov 23, 2020· Updated Aug 5, 2024

CVE-2019-14553

CVE-2019-14553

Description

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access.

Affected products

8

EDK II/EDK IIdescription
osv-coords7 versions
pkg:rpm/opensuse/ovmf&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/ovmf&distro=openSUSE%20Tumbleweed pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP1 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5
< 2017+git1510945757.b2662641d5-lp151.11.3.1+ 6 more
- (no CPE)range: < 2017+git1510945757.b2662641d5-lp151.11.3.1
- (no CPE)range: < 202105-3.4
- (no CPE)range: < 2017+git1510945757.b2662641d5-5.29.3
- (no CPE)range: < 2017+git1510945757.b2662641d5-3.23.1
- (no CPE)range: < 2017+git1510945757.b2662641d5-3.23.1
- (no CPE)range: < 2017+git1510945757.b2662641d5-3.23.1
- (no CPE)range: < 2017+git1510945757.b2662641d5-3.23.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

bugzilla.tianocore.org/show_bug.cgimitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.