CVE-2019-0108

Intel Data Center Manager SDK before version 5.0.2 is affected by CVE-2019-0108: a local information-disclosure flaw due to improper file permissions that could be exploited by an authenticated user. Affected product: Intel Data Center Manager SDK. Impact per CVSSv3: low confidentiality impact (C...

CVE-2019-0103

Insufficient file protection in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0111

Improper file permissions for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0111

The CVE-2019-0111 issue affects Intel® Data Center Manager SDK prior to version 5.0.2. According to connected sources (ICSA-19-050-01 and Intel advisory INTEL-SA-00215), it is a local information disclosure vulnerability caused by improper file permissions in the SDK’s install/login paths, exploi...

CVE-2019-0104

Insufficient file protection in uninstall routine for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0105

CVE-2019-0105 affects IntelData Center Manager SDK prior to version 5.0.2. The vulnerability is caused by insufficient file permissions checking in the install routine, which could allow an authenticated user to escalate privileges via local access. The issue is documented across multiple sources...

CVE-2019-0105: Incorrect Authorization

Insufficient file permissions checking in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0110: Undefined Security Weakness

Insufficient key management for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

PT-2019-11177

Name of the Vulnerable Software and Affected Versions: IntelR Data Center Manager SDK versions prior to 5.0.2 Description: The issue is related to improper flow control in crypto routines, which may allow a privileged user to potentially enable a denial of service via local access. Recommendation...

CVE-2019-0111: Incorrect Permission Assignment for Critical Resource

Improper file permissions for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0107: Undefined Security Weakness

Insufficient user prompt in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0103: Undefined Security Weakness

Insufficient file protection in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0102: Session Fixation

Insufficient session authentication in web server for IntelR Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-0109: Undefined Security Weakness

Improper folder permissions in IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0112: Undefined Security Weakness

Improper flow control in crypto routines for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2019-0106: Undefined Security Weakness

Insufficient run protection in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0108: Incorrect Permission Assignment for Critical Resource

Improper file permissions for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable disclosure of information via local access...

CVE-2019-0104: Undefined Security Weakness

Insufficient file protection in uninstall routine for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

PT-2019-1517

Name of the Vulnerable Software and Affected Versions IntelR Data Center Manager SDK versions prior to 5.0.2 Description The issue is related to insufficient session authentication in the web server, which may allow an unauthenticated user to potentially enable escalation of privilege via network...

PT-2019-2522

Name of the Vulnerable Software and Affected Versions IntelR Data Center Manager SDK versions prior to 5.0.2 Description The issue is related to improper file permissions, which may allow an authenticated user to potentially enable information disclosure via local access. This is due to...