Improper authentication in Data Center Manager SDK - CVE-2019-0102

Vulnerability identifier: #VU17789

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-0102

CWE-ID: CWE-287

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows an adjacent unauthenticated attacker to gain elevated privileges on the target system.

The weakness exists due to insufficient session authentication in web server for Intel(R) Data Center Manager SDK. An adjacent attacker can gain elevated privileges.

Data Center Manager SDK

Update to version 5.0.2.

Data Center Manager SDK - update to 5.0.2

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00215.html

• Multiple vulnerabilities in Intel Data Center Manager SDK