← All advisories

Medium severity4.9NVD Advisory· Published Nov 23, 2020· Updated Jun 17, 2026

CVE-2019-14553

CVE-2019-14553

Description

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access.

Affected products

10

EDK II/EDK IIdescription
Tianocore/Edk2
cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*
EDK II/EDK IIllm-fuzzy
osv-coords7 versions
pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP1 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/ovmf&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/opensuse/ovmf&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/ovmf&distro=openSUSE%20Leap%2015.1
< 2017+git1510945757.b2662641d5-5.29.3+ 6 more
- (no CPE)range: < 2017+git1510945757.b2662641d5-5.29.3
- (no CPE)range: < 2017+git1510945757.b2662641d5-3.23.1
- (no CPE)range: < 2017+git1510945757.b2662641d5-3.23.1
- (no CPE)range: < 2017+git1510945757.b2662641d5-3.23.1
- (no CPE)range: < 2017+git1510945757.b2662641d5-3.23.1
- (no CPE)range: < 202105-3.4
- (no CPE)range: < 2017+git1510945757.b2662641d5-lp151.11.3.1

Patches

Vulnerability mechanics

References

1

bugzilla.tianocore.org/show_bug.cginvdIssue Tracking

News mentions

0

No linked articles in our index yet.