CVE-2020-12308 Information disclosure in Intel(R) Computing Improvement Program
An unprivileged user can access sensitive information via network access due to improper access controls in the Intel Computing Improvement Program.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-12308?
CVE-2020-12308 is a medium-severity vulnerability in Intel(R) Computing Improvement Program, published on 12 Nov 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information disclosure via network access.
Which versions are affected by CVE-2020-12308?
It affects 1 product.
Products include Intel Computing Improvement Program.
How do I fix CVE-2020-12308?
No fix has been published for CVE-2020-12308 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-12308 being exploited?
There is no known exploitation of CVE-2020-12308 in the wild and no public exploit code.
Other vulnerabilities in Intel(R) Computing Improvement Program
- CVE-2025-24299 Privilege escalation in Intel(R) CIP software
- CVE-2021-0052 Privilege escalation in Intel(R) Computing Improvement Program
- CVE-2021-0074 Privilege escalation in Intel(R) Computing Improvement Program software
- CVE-2020-8736 Privilege escalation in Intel(R) Computing Improvement Program Advisory
- CVE-2019-11162 Missing authorization in Intel(R) Computing Improvement Program Advisory
Sources
Also known as GHSA-pp3v-4j93-35vr.