CVE-2019-11119

3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.5%
top 34.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Intel Raid WEB Console 3
Timeline
PublishedJun 13
Latest updateMay 24

Description

Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potentially enable escalation of privilege via network access.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5intel(r)_raid_web_console_3_for_windows*Version before 7.009.011.000

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-g5fh-m6cw-wmwm: Insufficient session validation in the service API for Intel(R) RWC3 version 4↗2022-05-24
▶
CVEList
CVE-2019-11119: Insufficient session validation in the service API for Intel(R) RWC3 version 4↗2019-06-13
▶