medium5.5
CVE-2023-38022
An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform before 3.29 for Intel SGX.
Impact
An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform before 3.29 for Intel SGX. Insufficient pointer validation allows a local attacker to access unauthorized information. This relates to strlen and sgx_is_within_user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortanix | Confidential Computing Manager | before 3.29 |