PT-2019-2396 · Intel · Intel Omni-Path Fabric Manager Gui

Marius Gabriel Mihai · Published 2019-06-11 · Updated 2023-03-02 · CVE-2019-11117

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Omni-Path Fabric Manager GUI versions prior to 10.9.2.1.1

Description The issue is related to improper permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via a local attack. This could be exploited by an attacker to gain elevated privileges.

Recommendations For versions prior to 10.9.2.1.1, update to version 10.9.2.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the installer to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-275

Related Identifiers

BDU:2019-02172

CVE-2019-11117

Affected Products

Intel Omni-Path Fabric Manager Gui

References · 7

• https://osv.dev/vulnerability/CVE-2019-11117 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00257.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02172 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/in · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11117 · Security Note
• https://vuldb.com/?id.136460 · Note
• http://securityfocus.com/bid/108788 · Note