CVE-2019-0102
published 2019-02-18CVE-2019-0102: Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially…
PriorityP348high8.8CVSS 3.0
AVAACLPRNUINSUCHIHAH
EPSS
1.27%
66.5th percentile
Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | data_center_manager | < 5.0.2 | 5.0.2 |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.05.8MEDIUMAV:A/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2rx9-6m9m-h79v: Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5
ghsa_unreviewed·2022-05-13
CVE-2019-0102 [HIGH] CWE-384 GHSA-2rx9-6m9m-h79v: Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5
Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CISA ICS
Intel Data Center Manager SDK
cisa_ics·2019-02-19·CVSS 8.8
[HIGH] Intel Data Center Manager SDK
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Intel Data Center Manager SDK
Last RevisedFebruary 19, 2019
Alert CodeICSA-19-050-01
## 1. EXECUTIVE SUMMARY
-
CVSS v3 8.8
- ATTENTION: Exploitable remotely/low skill level to exploit
- Vendor: Intel
- Equipment: Data Center Manager SDK
- Vulnerabilities: Improper Authentication, Protection Mechanism Failure, Permission Issues, Key Management Errors, Insufficient Control Flow Management
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities may allow escalation of privilege, denial of service, or information disclosure.
## 3. TECHNICAL DETAILS
## 3.1 AFFE
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.htmlhttp://www.securityfocus.com/bid/107069https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.htmlhttp://www.securityfocus.com/bid/107069https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html
2019-02-18
Published