| Vulnerability Name: | CVE-2022-28693 (CCN-230959) | ||||||||||||||||||||||||
| Assigned: | 2022-07-12 | ||||||||||||||||||||||||
| Published: | 2022-07-12 | ||||||||||||||||||||||||
| Updated: | 2022-07-12 | ||||||||||||||||||||||||
| Summary: | Intel Processors could allow a local authenticated attacker to obtain sensitive information, caused by unprotected alternative channel of return branch target prediction. An attacker could exploit this vulnerability to obtain sensitive information. | ||||||||||||||||||||||||
| CVSS v3 Severity: | 4.7 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) 4.1 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
| ||||||||||||||||||||||||
| CVSS v2 Severity: | 3.8 Low (CCN CVSS v2 Vector: AV:L/AC:H/Au:S/C:C/I:N/A:N)
| ||||||||||||||||||||||||
| Vulnerability Consequences: | Obtain Information | ||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2022-28693 Source: XF Type: UNKNOWN intel-cve202228693-info-disc(230959) Source: CCN Type: IBM Security Bulletin 6966316 (Cloud Pak System Software Suite) Multiple vulnerabilities in VMware ESXi affect IBM Cloud Pak System Source: CCN Type: INTEL-SA-00707 Intel Processors RRSBA Advisory Source: CCN Type: VMware Security Advisory VMSA-2021-0020 VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities | ||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||
| |||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||