Intel R Data Center Attestation Primitives Intel R Dcap May Allow Information Disclosure Unprivileged Software Adversary With An Unauthenticated User Combined With A Low Complexity Attack May Enable Data Exposure This Result May Potentially Occur Via Network Access When Attack Requirements Are Present With Special Internal Knowledge And Requires No User Interaction The Potential Vulnerability May Impact The Confidentiality None Integrity High And Availability None Of The Vulnerable System Resulting In Subsequent System Confidentiality High Integrity None And Availability None Impacts
Monthly
Protection mechanism failure in Intel Data Center Attestation Primitives (Intel DCAP) enables unauthenticated network-based attackers with specialized internal knowledge to undermine the integrity of the attestation system and expose confidential data from downstream systems relying on SGX enclave verification. The vulnerability (CWE-693) is particularly impactful in confidential computing environments where DCAP serves as the trust anchor for SGX workload isolation. No public exploit has been identified at time of analysis, and Intel has published advisory INTEL-SA-01449 addressing this issue.
Protection mechanism failure in Intel Data Center Attestation Primitives (Intel DCAP) enables unauthenticated network-based attackers with specialized internal knowledge to undermine the integrity of the attestation system and expose confidential data from downstream systems relying on SGX enclave verification. The vulnerability (CWE-693) is particularly impactful in confidential computing environments where DCAP serves as the trust anchor for SGX workload isolation. No public exploit has been identified at time of analysis, and Intel has published advisory INTEL-SA-01449 addressing this issue.