A protection mechanism failure in Intel DCAP creates a high risk of information disclosure, potentially allowing an unprivileged network attacker to access sensitive system data.

This vulnerability is a protection mechanism failure (CWE-693) that allows an unprivileged, unauthenticated network attacker to achieve information disclosure. It leverages internal system knowledge to bypass security controls.

The vulnerability carries a CVSS score of 8.9, indicating a high risk of significant data exposure. Successful exploitation could lead to the loss of confidentiality regarding sensitive system information, potentially undermining the trust model of the affected hardware and software ecosystem.

Immediate Action: Consult the official Intel security advisory at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01449.html to identify the specific patched firmware or software versions for your deployment.

Proactive Monitoring: Monitor network traffic for unusual access patterns directed at attestation services and audit system logs for signs of unauthorized information retrieval.

Compensating Controls: Ensure that systems utilizing Intel DCAP are isolated within protected network segments and that access to the attestation interface is restricted to authorized entities only.

Public Exploit Available: Unknown

Due to the high severity and potential for information disclosure, administrators must review the Intel security advisory immediately. Applying the recommended firmware or software updates is critical to maintaining the security posture and integrity of the affected environments.