PT-2019-1558 · Intel · Intel Unite

Published 2019-02-12 · Updated 2020-08-24 · CVE-2019-0101

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Unite(R) solution versions 3.2 through 3.3

Description The issue is related to insufficient access control in the Intel Unite solution, which may allow a remote attacker to escalate their privileges. An unauthenticated user could potentially enable escalation of privilege to the Intel Unite Solution administrative portal via network access.

Recommendations For Intel Unite(R) solution versions 3.2 through 3.3, consider restricting network access to the administrative portal as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2019-01089

CVE-2019-0101

Affected Products

Intel Unite

References · 6

• https://osv.dev/vulnerability/CVE-2019-0101 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00214.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01089 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-0101 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00214.html · Note
• http://securityfocus.com/bid/107076 · Note