CVEvulnerability
CVE-2019-11119
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-06-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Affected configurations
• intel raid web console 3 (<= 4.186)
References
- http://www.securityfocus.com/bid/108780 Broken Link, Third Party Advisory, VDB Entry
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00259.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/108780 Broken Link, Third Party Advisory, VDB Entry
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00259.html Patch, Vendor Advisory