ICSA-19-050-01

icsaUScisa_csaf_ot

Intel Data Center Manager SDK

view advisory published 2019-02-19

Successful exploitation of these vulnerabilities may allow escalation of privilege, denial of service, or information disclosure.

01

describes (11)

Related CVEs.

IDseverity exploitable
CVE-2019-0112USmedium4.4—
Improper flow control in crypto routines for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable a denial of service via local a…
CVE-2019-0111USmedium5.5—
Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2019-0110USmedium5.5—
Insufficient key management for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2019-0109UShigh7.8—
Improper folder permissions in Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2019-0108USmedium5.5—
Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable disclosure of information via local access…
CVE-2019-0107USmedium6.7—
Insufficient user prompt in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via…
CVE-2019-0106USmedium6.7—
Insufficient run protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege v…
CVE-2019-0105UShigh7.8OT elevated—
Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow authenticated user to potentially enable escalation of…
CVE-2019-0104USmedium5.5—
Insufficient file protection in uninstall routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclo…
CVE-2019-0103USmedium5.5—
Insufficient file protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosu…
CVE-2019-0102UShigh8.8—
Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of pr…
02

references

External citations — patches, advisories, analysis.

03

remediations (22)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan