PT-2019-2396 · Intel · Intel Omni-Path Fabric Manager Gui

Marius Gabriel Mihai · CVE-2019-11117 · Publicado 2019-06-11 · Atualizado 2023-03-02

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Omni-Path Fabric Manager GUI versions prior to 10.9.2.1.1

Description The issue is related to improper permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via a local attack. This could be exploited by an attacker to gain elevated privileges.

Recommendations For versions prior to 10.9.2.1.1, update to version 10.9.2.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the installer to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-275

Identificadores relacionados

BDU:2019-02172

CVE-2019-11117

Produtos afetados

Intel Omni-Path Fabric Manager Gui

Referências · 7

• https://vuldb.com/?id.136460 · Nota
• https://osv.dev/vulnerability/CVE-2019-11117 · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00257.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-02172 · Nota de Segurança
• http://securityfocus.com/bid/108788 · Nota
• https://intel.com/content/www/us/en/security-center/advisory/in · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11117 · Nota de Segurança