AMD Device Management Portal KVM Key Download Improper Privilege Management Vulnerability

A vulnerability exists in the KVM key download component of the AMD Device Management Portal, specifically in versions prior to 2.1. Improper privilege management could allow an attacker to swap tokens and download sensitive keys, leading to unauthorized access to privileged resources and a loss of confidentiality.

Impact

Exploitation of this vulnerability could result in unauthorized access to privileged resources and the disclosure of sensitive keys, potentially leading to further security risks.

Remediation

Users are advised to update to AMD Device Management Portal version 2.1 or higher.