CVEvulnerability
CVE-2019-0102
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-02-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-384
Description
Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Affected configurations
• intel data center manager (< 5.0.2)
Related
Weakness · CWE (1)
- CWE-384 Session Fixation weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.html lists.opensuse.org
- http://www.securityfocus.com/bid/107069 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01 Third Party Advisory, US Government Resource
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.html lists.opensuse.org
- http://www.securityfocus.com/bid/107069 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01 Third Party Advisory, US Government Resource
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html Vendor Advisory