Description
Improper neutralization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Intel(R) Data Center Manager software | before version 4.1 | — |
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00662.html
- 20221208 [CVE-2022-21225] Intel Data Center Manager Console <= 4.1 "getRoomRackData" Authenticated (Guest+) SQL Injection mailing-list
- http://packetstormsecurity.com/files/170180/Intel-Data-Center-Manager-4.1-SQL-Injection.html