CVE-2019-0105
published 2019-02-18CVE-2019-0105: Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow authenticated user to potentially…
PriorityP434high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EPSS
0.40%
32.4th percentile
Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow authenticated user to potentially enable escalation of privilege via local access.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | data_center_manager | < 5.0.2 | 5.0.2 |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Intel Data Center Manager SDK
cisa_ics·2019-02-19·CVSS 8.8
[HIGH] Intel Data Center Manager SDK
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Intel Data Center Manager SDK
Last RevisedFebruary 19, 2019
Alert CodeICSA-19-050-01
## 1. EXECUTIVE SUMMARY
-
CVSS v3 8.8
- ATTENTION: Exploitable remotely/low skill level to exploit
- Vendor: Intel
- Equipment: Data Center Manager SDK
- Vulnerabilities: Improper Authentication, Protection Mechanism Failure, Permission Issues, Key Management Errors, Insufficient Control Flow Management
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities may allow escalation of privilege, denial of service, or information disclosure.
## 3. TECHNICAL DETAILS
## 3.1 AFFE
GHSA
GHSA-c8r4-hmvh-f76v: Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5
ghsa_unreviewed·2022-05-13
CVE-2019-0105 [HIGH] CWE-863 GHSA-c8r4-hmvh-f76v: Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5
Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow authenticated user to potentially enable escalation of privilege via local access.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/107069https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.htmlhttp://www.securityfocus.com/bid/107069https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html
2019-02-18
Published