CVE-2022-25899

Source
https://cve.org/CVERecord?id=CVE-2022-25899
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25899.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-25899
Published
2022-08-18T20:15:10Z
Modified
2026-08-27T08:15:05Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

References

Affected packages

Git / github.com/device-management-toolkit/deployment

Affected ranges

Type
GIT
Repo
https://github.com/device-management-toolkit/deployment
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Introduced
Fixed
Database specific
Show details
{
    "cpe": "cpe:2.3:a:intel:open_active_management_technology_cloud_toolkit:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.0.2"
        },
        {
            "introduced": "2.2.0"
        },
        {
            "fixed": "2.2.2"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v1.*
v1.0.0
v1.1.0
v1.2.0
v1.3.0
v1.4.0
v1.5.0
v2.*
v2.0.0
v2.0.1
v2.2.0
v2.2.1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25899.json"