CVE-2022-25899

Source
https://cve.org/CVERecord?id=CVE-2022-25899
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25899.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-25899
Published
2022-08-18T20:15:10.737Z
Modified
2026-04-10T04:46:23.376084Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

References

Affected packages

Git / github.com/open-amt-cloud-toolkit/open-amt-cloud-toolkit

Affected ranges

Type
GIT
Repo
https://github.com/open-amt-cloud-toolkit/open-amt-cloud-toolkit
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Introduced
Fixed
Database specific
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.0.2"
        },
        {
            "introduced": "2.2.0"
        },
        {
            "fixed": "2.2.2"
        }
    ]
}

Affected versions

v1.*
v1.0.0
v1.1.0
v1.2.0
v1.3.0
v1.4.0
v1.5.0
v2.*
v2.0.0
v2.0.1
v2.2.0
v2.2.1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25899.json"