Lucene search

IntelCVE-2019-0173

HistoryAug 19, 2019 - 5:15 p.m.

CVE-2019-0173

2019-08-1917:15:11

intel

web.nvd.nist.gov

cve-2019-0173

web console

intel

raid

authentication bypass

disclosure

info

security vulnerability

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

40.8%

JSON

Authentication bypass in the web console for Intel® Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially enable disclosure of information via network access.

Affected configurations

Nvd

Node

intelraid_web_console_2

VendorProductVersionCPE
intelraid_web_console_2*cpe:2.3:a:intel:raid_web_console_2:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	raid_web_console_2	*	cpe:2.3:a:intel:raid_web_console_2::::::::

CNA Affected

[
  {
    "product": "Intel(R) RAID Web Console 2 Advisory",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Web Console 2 all versions"
      }
    ]
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00246.html

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

40.8%

JSON

Related for CVE-2019-0173