PT-2018-16129 · Intel · Intel Raid Web Console 3 For Windows

Publicado 2018-11-14 · Atualizado 2018-12-31 · CVE-2018-3696

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel RAID Web Console 3 for Windows versions prior to 4.186

Description The issue allows an unprivileged user to potentially gain administrative privileges via local access due to an authentication bypass.

Recommendations For versions prior to 4.186, update to version 4.186 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-3696

Produtos afetados

Intel Raid Web Console 3 For Windows

Referências · 4

• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00196.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-3696 · Aviso do Fabricante
• http://securityfocus.com/bid/106028 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-3696 · Nota de Segurança