CVEvulnerability
CVE-2019-0135
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-03-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206
Affected configurations
• intel rapid storage technology enterprise (< 5.5.0.2015)
• lenovo thinkstation p520 firmware
• lenovo thinkstation p520c firmware
• lenovo thinkstation p720 firmware
• lenovo thinkstation p920 firmware
Related
Weakness · not in database (1)
References
- https://support.lenovo.com/us/en/product_security/LEN-27843 Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00231.html Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-27843 Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00231.html Vendor Advisory