CVE-2019-0103 - Insufficient file protection in install routine for Intel(R) Data Center Manager SDK before version

CVE-2019-0103

Summary

Insufficient file protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.

References

http://www.securityfocus.com/bid/107074
https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html

Vulnerable Configurations

cpe:2.3:a:intel:data_center_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:data_center_manager:*:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bid	107074
confirm	https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html
misc	https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01

Last major update

24-08-2020 - 17:37

Published

18-02-2019 - 17:29

Last modified

24-08-2020 - 17:37