CVSS 3.0
8.8 highCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2019-0102
Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-384
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:data_center_manager
References
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.html
- http://www.securityfocus.com/bid/107069
- https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.html