High ICSA-19-050-01 11 CVEs

Intel Data Center Manager SDK

Published Feb 19, 2019 · Updated Feb 19, 2019

Vendor: Intel Product: Data Center Manager SDK

Summary

Successful exploitation of these vulnerabilities may allow escalation of privilege, denial of service, or information disclosure.

Vulnerabilities 11

Unscored —

CVE-2019-0102

Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a…

Feb 18, 2019
Unscored —

CVE-2019-0103

Insufficient file protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an …

Feb 18, 2019
Unscored —

CVE-2019-0104

Insufficient file protection in uninstall routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a…

Feb 18, 2019
Unscored —

CVE-2019-0105

Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may…

Feb 18, 2019
Unscored —

CVE-2019-0106

Insufficient run protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a pr…

Feb 18, 2019
Unscored —

CVE-2019-0107

Insufficient user prompt in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privi…

Feb 18, 2019
Unscored —

CVE-2019-0108

Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to …

Feb 18, 2019
Unscored —

CVE-2019-0109

Improper folder permissions in Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to…

Feb 18, 2019
Unscored —

CVE-2019-0110

Insufficient key management for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user t…

Feb 18, 2019
Unscored —

CVE-2019-0111

Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to …

Feb 18, 2019
Unscored —

CVE-2019-0112

Improper flow control in crypto routines for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileg…

Feb 18, 2019

Revision history

2019-02-19 #1
ICSA-19-050-01 Intel Data Center Manager SDK

References

ICS Advisory ICSA-19-050-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-050-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-19-050-01