Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access.
{
"unresolved_ranges": [
{
"source": "CPE_RANGE",
"cpes": [
"cpe:2.3:a:intel:integrated_performance_primitives_cryptography:*:*:*:*:*:*:*:*"
],
"vendor_product": "intel:integrated_performance_primitives_cryptography",
"extracted_events": [
{
"fixed": "2021.5"
}
]
}
]
}