{"id":"CVE-2023-24478","aliases":["EUVD-2023-28496","GHSA-vj4f-hcgr-4hvj"],"status":"published","title":"Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R...","description":"Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00185,"percentile":0.08141,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-330"],"published":"2023-08-15T12:42:18Z","modified":"2026-06-17T05:39:20Z","products":[{"vendor":"intel","product":"quartus_prime"}],"references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00850.html","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24478"},{"url":"https://github.com/advisories/GHSA-vj4f-hcgr-4hvj"}],"sources":{"cve":[{"id":"CVE-2023-24478","description":"Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access.","status":"published","published":"2023-08-15T12:42:18.308Z","modified":"2024-10-01T18:24:41.291Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-330"],"updated_at":"2026-11-02T14:35:26.63732Z"}],"euvd":[{"id":"EUVD-2023-28496","description":"Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access.","status":"published","published":"2023-08-15T12:42:18Z","modified":"2024-10-01T18:24:41Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:27:59.918435Z"}],"ghsa":[{"id":"GHSA-vj4f-hcgr-4hvj","title":"Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R...","description":"Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access.","status":"published","published":"2023-08-15T15:30:48Z","modified":"2024-04-04T06:57:43Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-330"],"updated_at":"2026-11-02T14:56:47.061253Z"}],"nvd":[{"id":"CVE-2023-24478","description":"Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access.","status":"published","published":"2023-08-15T13:15:09.477Z","modified":"2026-06-17T05:39:20.747Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-330"],"updated_at":"2026-11-02T14:08:24.487686Z"}]}}