Privileged data disclosure and escalation via improper authentication

Improper authentication in Intel TDX Module 1.5.28 and earlier and 2.0.16 and earlier allows local users to disclose data and escalate privileges. Intel has not published the authentication decision, request path, or code operation that incorrectly accepts an unauthorized action inside the Ring 0 Trust Domain. Exploitation requires a privileged system-software adversary, local access, high attack complexity, and additional attack requirements; successful attacks expose protected data and gain privileges without interrupting availability.