Intel® RAID Web Console 3 for Windows* Authentication Bypass Advisory

Summary:****

A potential security vulnerability in Intel® RAID Web Console 3 for Windows* may allow information disclosure.** **Intel is releasing software updates to mitigate this potential vulnerability.

Vulnerability Details:

CVEID: CVE-2018-3696

Description: Authentication bypass in the Intel® RAID Web Console 3 for Windows* before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access.

CVSS Base Score: 5.5 Medium

CVSS Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

Affected Products:

Intel® RAID Web Console v3 for Windows* before version 4.186.

Recommendations:

Intel recommends that users of Intel® RAID Web Console v3 for Windows* update to 4.186 or later.

Updates are available for download at this location: <https://downloadcenter.intel.com/download/28183/Intel-RAID-Web-Console-3-for-Windows-?wapkw=rwc3&gt;

Acknowledgements:

Intel would like to thank Joe Standing for reporting this issue and working with us on coordinated disclosure.