CVE-2023-38022

Summary

CVE-2023-38022 is a vulnerability affecting Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform versions prior to 3.29 on Intel SGX. The weakness lies in insufficient pointer validation, enabling a local attacker to gain unauthorized access to sensitive information. This vulnerability specifically involves the 'strlen' and 'sgx_is_within_user' functions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.