CVE-2024-21981

MEDIUM Year: 2024
CVSS v3 Score
5.7
Medium
Weakness Type
CWE-639
View all →

Vulnerability Description

Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in ASP to extract ASP cryptographic keys, potentially resulting in loss of confidentiality and integrity.

Related Vulnerabilities

CVE-2017-0936

MEDIUM
CVSS:5.7(Medium)

Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app p...

CWE-6392017

CVE-2020-13462

MEDIUM
CVSS:5.7(Medium)

Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA.

CWE-6392020

CVE-2019-16546

MEDIUM
CVSS:5.9(Medium)

Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks.

CWE-6392019

CVE-2021-31970

MEDIUM
CVSS:5.5(Medium)

Windows TCP/IP Driver Security Feature Bypass Vulnerability

CWE-6392021

CVE-2021-4142

MEDIUM
CVSS:5.5(Medium)

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication ...

CWE-6392021

CVE-2021-43820

MEDIUM
CVSS:5.9(Medium)

Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cached in memory in seaf...

CWE-6392021