CVE-2022-21163 - Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access

Back Back to CVE browser

HIGH

Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access

Published Feb 16, 2023

8.4

HIGH

CVSS 3.1

EPSS 0.25%

Description

Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

Vendor n/a Product Crypto API Toolkit for Intel(R) SGX Default
unaffected
Affected
- before version 2.0 commit ID 91ee496

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Crypto API Toolkit for Intel(R) SGX	unaffected	Affected before version 2.0 commit ID 91ee496

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html
Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-26408
Advisory

Link	Providers	Tags
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-26408		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner intel

Published Feb 16, 2023

Updated Jan 27, 2025

Reserved Dec 9, 2021

Link CVE-2022-21163

CISA Vulnrichment

Updated Jan 27, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-21163

Red Hat

No data

ENISA EUVD

Assigner intel

Published Feb 16, 2023

Updated Jan 27, 2025

Link EUVD-2022-26408

GitHub

No data