Authentication flaw

Insufficient session authentication in web server for IntelR Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Design/Logic Flaw

Insufficient run protection in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper file permissions for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

Information disclosure

Insufficient key management for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

Authorization

Insufficient file protection in uninstall routine for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

Authorization

Insufficient file permissions checking in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0104

Insufficient file protection in uninstall routine for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0103

Insufficient file protection in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0107

Insufficient user prompt in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0112

Improper flow control in crypto routines for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2019-0102

Insufficient session authentication in web server for IntelR Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-0108

Improper file permissions for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable disclosure of information via local access...

CVE-2019-0103

Insufficient file protection in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0109

Improper folder permissions in IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0111

Improper file permissions for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0112

Improper flow control in crypto routines for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2019-0111

Improper file permissions for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0108

Intel Data Center Manager SDK before version 5.0.2 is affected by CVE-2019-0108: a local information-disclosure flaw due to improper file permissions that could be exploited by an authenticated user. Affected product: Intel Data Center Manager SDK. Impact per CVSSv3: low confidentiality impact (C...

CVE-2019-0111

The CVE-2019-0111 issue affects Intel® Data Center Manager SDK prior to version 5.0.2. According to connected sources (ICSA-19-050-01 and Intel advisory INTEL-SA-00215), it is a local information disclosure vulnerability caused by improper file permissions in the SDK’s install/login paths, exploi...

CVE-2019-0102

CVE-2019-0102 affects Intel Data Center Manager SDK before version 5.0.2. The flaw is insufficient session authentication in the web server, allowing an unauthenticated user to potentially escalate privileges via network access. CVSS v3 base score 8.8 (vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H...