Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-0131
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00521.html