PT-2019-1558 · Intel · Intel Unite

Publicado 2019-02-12 · Atualizado 2020-08-24 · CVE-2019-0101

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Unite(R) solution versions 3.2 through 3.3

Description The issue is related to insufficient access control in the Intel Unite solution, which may allow a remote attacker to escalate their privileges. An unauthenticated user could potentially enable escalation of privilege to the Intel Unite Solution administrative portal via network access.

Recommendations For Intel Unite(R) solution versions 3.2 through 3.3, consider restricting network access to the administrative portal as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2019-01089

CVE-2019-0101

Produtos afetados

Intel Unite

Referências · 6

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00214.html · Nota
• https://osv.dev/vulnerability/CVE-2019-0101 · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00214.html · Aviso do Fabricante
• http://securityfocus.com/bid/107076 · Nota
• https://bdu.fstec.ru/vul/2019-01089 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-0101 · Nota de Segurança