PT-2019-1668 · Intel · Intel Capability Licensing Service

Publicado 2019-03-12 · Atualizado 2019-10-03 · CVE-2018-12200

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Capability Licensing Service versions prior to 1.50.638.1

Description The issue is related to insufficient access control in the Intel(R) Capability Licensing Service, which may allow an unprivileged user to potentially escalate privileges via local access. This could enable an attacker to gain higher privileges.

Recommendations For versions prior to 1.50.638.1, update to version 1.50.638.1 or later to resolve the issue.

Correção

Incorrect Permission

Improper Access Control

Enumeração de Fraquezas

CWE-732

CWE-284

Identificadores relacionados

BDU:2019-01216

CVE-2018-12200

Produtos afetados

Intel Capability Licensing Service

Referências · 6

• https://bdu.fstec.ru/vul/2019-01216 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-12200 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00185.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-12200 · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00185.html · Nota
• https://security.netapp.com/advisory/ntap-20190318-0001 · Nota