CVE-2025-24520 | THREATINT

Description

Insertion of sensitive information into log file for some Intel(R) Local Manageability Service software before version 2514.7.16.0 may allow an authenticated user to potentially enable information disclosure via local access.

Reserved 2025-01-25 | Published 2025-08-12 | Updated 2025-08-12 | Assigner intel

MEDIUM: 4.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

LOW: 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Problem types

Information Disclosure

Insertion of Sensitive Information into Log File

References

intel.com/...en/security-center/advisory/intel-sa-01342.html

cve.org (CVE-2025-24520)

nvd.nist.gov (CVE-2025-24520)

Download JSON