CVE-2019-0106

Insufficient run protection in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0110

Insufficient key management for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0111

Improper file permissions for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0109

Intel Data Center Manager SDK prior to version 5.0.2 is affected by CVE-2019-0109, described as improper folder permissions that may allow an authenticated user to escalate privileges via local access. The vulnerability is listed with CVSS v3 base score 7.8 (LOCAL, LOW ATTACK). Affected product: ...

CVE-2019-0105

CVE-2019-0105 affects IntelData Center Manager SDK prior to version 5.0.2. The vulnerability is caused by insufficient file permissions checking in the install routine, which could allow an authenticated user to escalate privileges via local access. The issue is documented across multiple sources...

CVE-2019-0110

CVE-2019-0110 affects Intel Data Center Manager SDK prior to version 5.0.2. The vulnerability is insufficient key management that may allow an authenticated user to cause information disclosure via local access. The CNVD/VCVE lists the issue as a local-access information disclosure with a CVSS v3...

CVE-2019-0103

The CVE-2019-0103 issue affects Intel Data Center Manager SDK prior to 5.0.2. It stems from insufficient file protection in the install routine, enabling an authenticated local attacker to disclose information. Affected product: Intel Data Center Manager SDK (pre-5.0.2). Impact is information dis...

CVE-2019-0112

Improper flow control in crypto routines for IntelR Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2019-0112

Intel Data Center Manager SDK (before 5.0.2) is affected by CVE-2019-0112 due to improper flow control in crypto routines. A privileged local attacker could trigger a denial of service. The issue affects the Intel DCM SDK prior to 5.0.2; remediation is to upgrade to version 5.0.2 or apply Intel a...

CVE-2019-0111

The CVE-2019-0111 issue affects Intel® Data Center Manager SDK prior to version 5.0.2. According to connected sources (ICSA-19-050-01 and Intel advisory INTEL-SA-00215), it is a local information disclosure vulnerability caused by improper file permissions in the SDK’s install/login paths, exploi...

CVE-2019-0108

Improper file permissions for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable disclosure of information via local access...

CVE-2019-0103

Insufficient file protection in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-0105

Insufficient file permissions checking in install routine for IntelR Data Center Manager SDK before version 5.0.2 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0102

CVE-2019-0102 affects Intel Data Center Manager SDK before version 5.0.2. The flaw is insufficient session authentication in the web server, allowing an unauthenticated user to potentially escalate privileges via network access. CVSS v3 base score 8.8 (vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H...

Design/Logic Flaw

Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature...

CVE-2018-20237

Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature...

CVE-2018-20237

Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature...

CVE-2018-20237

Confluence Server/Data Center prior to version 6.13.1 is affected by an information-disclosure vulnerability in the Word Export feature. An authenticated user can download content from deleted pages, exposing partially confidential data. Root cause: Word Export component allows access to deleted ...

Intel® Data Center Manager SDK Advisory

Summary: Multiple potential security vulnerabilities in Intel® Data Center Manager SDK may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-0102...

The vulnerability of the Cisco Data Center Network Manager system arises from errors in checking user requests in the management interface. This allows attackers to disclose or modify sensitive information that is protected by the system.

The vulnerability of the Cisco Data Center Network Manager system relates to errors in checking user requests in the management interface. Exploiting this vulnerability can allow a malicious actor to disclose or modify sensitive information...