CVE-2019-0106

Insufficient run protection in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper folder permissions in IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0107

Insufficient user prompt in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0102

Insufficient session authentication in web server for IntelR Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-0107

The CVE-2019-0107 entry relates to the Intel® Data Center Manager SDK prior to version 5.0.2. The documented flaw is Insufficient user prompt in the install routine, which may allow a privileged user to escalate privileges via local access. Affected component: Intel Data Center Manager SDK instal...

CVE-2019-0102

Insufficient session authentication in web server for IntelR Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-0104

CVE-2019-0104 affects Intel Data Center Manager SDK prior to 5.0.2. The issue is insufficient file protection in the uninstall routine, potentially enabling information disclosure via local access by an authenticated user. Reported under Intel advisory INTEL-SA-00215 and corroborated by multiple ...

CVE-2019-0108

Intel Data Center Manager SDK before version 5.0.2 is affected by CVE-2019-0108: a local information-disclosure flaw due to improper file permissions that could be exploited by an authenticated user. Affected product: Intel Data Center Manager SDK. Impact per CVSSv3: low confidentiality impact (C...

CVE-2019-0106

The CVE-2019-0106 issue affects Intel Data Center Manager SDK prior to version 5.0.2. The root cause is insufficient run protection in the install routine, which may let a privileged local user escalate privileges. The vulnerability is documented across multiple sources (NVD/NVD CNVD, CVE listing...

CVE-2019-0104

Insufficient file protection in uninstall routine for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0109

Improper folder permissions in IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0110

Insufficient key management for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0111

Improper file permissions for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0109

Intel Data Center Manager SDK prior to version 5.0.2 is affected by CVE-2019-0109, described as improper folder permissions that may allow an authenticated user to escalate privileges via local access. The vulnerability is listed with CVSS v3 base score 7.8 (LOCAL, LOW ATTACK). Affected product: ...

CVE-2019-0105

CVE-2019-0105 affects IntelData Center Manager SDK prior to version 5.0.2. The vulnerability is caused by insufficient file permissions checking in the install routine, which could allow an authenticated user to escalate privileges via local access. The issue is documented across multiple sources...

CVE-2019-0103

The CVE-2019-0103 issue affects Intel Data Center Manager SDK prior to 5.0.2. It stems from insufficient file protection in the install routine, enabling an authenticated local attacker to disclose information. Affected product: Intel Data Center Manager SDK (pre-5.0.2). Impact is information dis...

CVE-2019-0112

Improper flow control in crypto routines for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2019-0112

Intel Data Center Manager SDK (before 5.0.2) is affected by CVE-2019-0112 due to improper flow control in crypto routines. A privileged local attacker could trigger a denial of service. The issue affects the Intel DCM SDK prior to 5.0.2; remediation is to upgrade to version 5.0.2 or apply Intel a...

CVE-2019-0111

The CVE-2019-0111 issue affects Intel® Data Center Manager SDK prior to version 5.0.2. According to connected sources (ICSA-19-050-01 and Intel advisory INTEL-SA-00215), it is a local information disclosure vulnerability caused by improper file permissions in the SDK’s install/login paths, exploi...

CVE-2019-0110

CVE-2019-0110 affects Intel Data Center Manager SDK prior to version 5.0.2. The vulnerability is insufficient key management that may allow an authenticated user to cause information disclosure via local access. The CNVD/VCVE lists the issue as a local-access information disclosure with a CVSS v3...