CVE-2019-0104 - Insufficient file protection in uninstall routine for Intel(R) Data Center Manager SDK before versio

CVE-2019-0104

Summary

Insufficient file protection in uninstall routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.

References

http://www.securityfocus.com/bid/107109
https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html

Vulnerable Configurations

cpe:2.3:a:intel:data_center_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:data_center_manager:*:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bid	107109
confirm	https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html
misc	https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01

Last major update

24-08-2020 - 17:37

Published

18-02-2019 - 17:29

Last modified

24-08-2020 - 17:37