CVE-2019-14553 Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network…

Description

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access.

Affected products and versions

Product	Affected versions	Fixed in
Extensible Firmware Interface Development Kit (EDK II)	Versions not published

Other CVEs of Extensible Firmware Interface Development Kit (EDK II)

The 8 CVEs of Extensible Firmware Interface Development Kit (EDK II) →

CVE-2019-14587 Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access Not rated CVE-2019-14586 Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege,… Not rated CVE-2019-14575 Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation… Not rated CVE-2019-14563 Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local… Not rated