PT-2018-1594 · Intel · Intel Data Center Manager Sdk

Published 2018-09-12 · Updated 2019-10-03 · CVE-2018-3679

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Data Center Manager SDK versions 5.0 and before

Description The issue is related to an escalation of privilege in the Reference UI component of the Intel Data Center Manager SDK, caused by privilege management errors. This may allow an unauthorized remote unauthenticated user to potentially execute code with administrator privileges.

Recommendations For Intel Data Center Manager SDK versions 5.0 and before, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2018-01151

CVE-2018-3679

Affected Products

Intel Data Center Manager Sdk

References · 5

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00143.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-3679 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3679 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01151 · Security Note
• https://cxsecurity.com/cveshow/CVE-2018-3679 · Note