CVE-2020-12308: 
Intel Computing Improvement Program vulnerability analysis and mitigation

Improper access control vulnerability (CVE-2020-12308) was identified in the Intel(R) Computing Improvement Program versions before 2.4.5982. This security flaw could allow an unprivileged user to potentially enable information disclosure through network access (NVD, Intel Advisory).

The vulnerability has been assigned a CVSS v3.1 Base Score of 6.5 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The CVSS v2.0 Base Score is 4.0 (Medium) with vector: (AV:N/AC:L/Au:S/C:P/I:N/A:N). These scores indicate that the vulnerability is network-accessible, requires low attack complexity, and can result in high confidentiality impact (NVD).

The vulnerability could lead to information disclosure when exploited by an unprivileged user through network access. The impact is primarily focused on confidentiality, with no direct impact on integrity or availability of the system (NVD).

Intel has released software updates to mitigate this vulnerability. Users are advised to update to Intel(R) Computing Improvement Program version 2.4.5982 or later (Intel Advisory).