Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-0069 State: PUBLISHED Published: 2019-10-09T19:26:17.944822Z Last Updated: 2024-09-16T23:16:00.830Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Juniper Networks Products: Junos OS Problem Types: Cleartext Storage of Sensitive Information Description: On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device authentication are written to a log file in clear text. This issue does not affect users that are l
s used during device authentication are written to a log file in clear text. This issue does not affect users that are logging-in using telnet, SSH or J-web to the management IP. This issue affects ACX, NFX, SRX, EX and QFX platforms with the Linux Host OS architecture, it does not affect other SRX and EX platforms that do not use the Linux Host OS architecture. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D110 on vSRX, SRX1500, SRX4000 Series; 15.1X53 versions prior to 15.1X53-D234 on QFX5110, QFX5200 Series; 15.1X53 versions prior to 15.1X53-D68 on QFX10K Series; 17.1 versions prior to 17.1R2-S8, 17.1R3, on QFX5110, QFX5200, QFX10K Series; 17.2 versions p
1X53-D68 on QFX10K Series; 17.1 versions prior to 17.1R2-S8, 17.1R3, on QFX5110, QFX5200, QFX10K Series; 17.2 versions prior to 17.2R1-S7, 17.2R2-S6, 17.2R3 on QFX5110, QFX5200, QFX10K Series; 17.3 versions prior to 17.3R2 on vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series; 14.1X53 versions prior to 14.1X53-D47 on ACX5000, EX4600, QFX5100 Series; 15.1 versions prior to 15.1R7 on ACX5000, EX4600, QFX5100 Series; 16.1R7 versions prior to 16.1R7 on ACX5000, EX4600, QFX5100 Series; 17.1 versions prior to 17.1R2-S10, 17.1R3 on ACX5000, EX4600, QFX5100 Series; 17.2 versions prior to 17.2R3 on ACX5000, EX4600, QFX5100 Series; 17.3 versions prior to 17.3R3 on ACX5000, EX4600, QFX5100 Series;
ns prior to 17.2R3 on ACX5000, EX4600, QFX5100 Series; 17.3 versions prior to 17.3R3 on ACX5000, EX4600, QFX5100 Series; 17.4 versions prior to 17.4R2 on ACX5000, EX4600, QFX5100 Series; 18.1 versions prior to 18.1R2 on ACX5000, EX4600, QFX5100 Series; 15.1X53 versions prior to 15.1X53-D496 on NFX Series, 17.2 versions prior to 17.2R3-S1 on NFX Series; 17.3 versions prior to 17.3R3-S4 on NFX Series; 17.4 versions prior to 17.4R2-S4, 17.4R3 on NFX Series, 18.1 versions prior to 18.1R3-S4 on NFX Series; 18.2 versions prior to 18.2R2-S3, 18.2R3 on NFX Series; 18.3 versions prior to 18.3R1-S3, 18.3R2 on NFX Series; 18.4 versions prior to 18.4R1-S1, 18.4R2 on NFX Series. Additional Analyst Notes:
or to 18.3R1-S3, 18.3R2 on NFX Series; 18.4 versions prior to 18.4R1-S1, 18.4R2 on NFX Series. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10969
CVE ID: CVE-2019-0070 State: PUBLISHED Published: 2019-10-09T19:26:17.991665Z Last Updated: 2024-09-17T00:55:57.308Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: CWE - 20 Improper Input Validation Description: An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to take control of the entire system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1 on
ng able to take control of the entire system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1 on NFX Series. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10977
CVE ID: CVE-2019-0071 State: PUBLISHED Published: 2019-10-09T19:26:18.033236Z Last Updated: 2024-09-16T17:58:37.253Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: CWE-347 Description: Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in specific versions of Junos OS, affecting specific EX Series platforms, the Veriexec subsystem will fail to initialize, in essence disabling file integrity checking. This may allow a locally authenticated user with shell access to install untrusted executable images, and elevate privileg
is may allow a locally authenticated user with shell access to install untrusted executable images, and elevate privileges to gain full control of the system. During the installation of an affected version of Junos OS are installed, the following messages will be logged to the console: Initializing Verified Exec: /sbin/veriexec: Undefined symbol "__aeabi_uidiv" /sbin/veriexec: Undefined symbol "__aeabi_uidiv" /sbin/veriexec: Undefined symbol "__aeabi_uidiv" veriexec: /.mount/packages/db/os-kernel-prd-arm-32-20190221.70c2600_builder_stable_11/boot/brcm-hr3.dtb: Authentication error veriexec: /.mount/packages/db/os-kernel-prd-arm-32-20190221.70c2600_builder_stable_11/boot/contents.izo: Authent
n error veriexec: /.mount/packages/db/os-kernel-prd-arm-32-20190221.70c2600_builder_stable_11/boot/contents.izo: Authentication error ... This issue affects Juniper Networks Junos OS: 18.1R3-S4 on EX2300, EX2300-C and EX3400; 18.3R1-S3 on EX2300, EX2300-C and EX3400. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10978 - https://www.juniper.net/documentation/en_US/junos/topics/concept/veriexec.html
CVE ID: CVE-2019-0072 State: PUBLISHED Published: 2019-10-09T19:26:18.073970Z Last Updated: 2024-09-16T18:56:06.030Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Juniper Networks Products: SBR Carrier Problem Types: CWE-256 Description: An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information. This issue affects: Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R13; 8.5.0 versions prior to 8.5.0R4. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10971
CVE ID: CVE-2019-0073 State: PUBLISHED Published: 2019-10-09T19:26:18.113668Z Last Updated: 2024-09-16T19:20:57.184Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Juniper Networks Products: Junos OS Problem Types: CWE-732 Description: The PKI keys exported using the command "run request security pki key-pair export" on Junos OS may have insecure file permissions. This may allow another user on the Junos OS device with shell access to read them. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D180; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior
ions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R2. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10974
CVE ID: CVE-2019-0074 State: PUBLISHED Published: 2019-10-09T19:26:18.153175Z Last Updated: 2024-09-17T03:38:51.289Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Juniper Networks Products: Junos OS Problem Types: privilege escalation, Improper Privilege Management., CWE-22, CWE-23 Description: A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine (NG-RE) allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series with Next-Generation Routing Engine (NG-RE) wh
NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series with Next-Generation Routing Engine (NG-RE) which uses vmhost. This issue affects Juniper Networks Junos OS on NFX150 Series and QFX10K, EX9200 Series, MX Series and PTX Series with NG-RE and vmhost: 15.1F versions prior to 15.1F6-S12 16.1 versions starting from 16.1R6 and later releases, including the Service Releases, prior to 16.1R6-S6, 16.1R7-S3; 17.1 versions prior to 17.1R3; 17.2 versions starting from 17.2R1-S3, 17.2R3 and later releases, including the Service Releases, prior to 17.2R3-S1; 17.3 versions starting from 17.3R1-S1, 17.3R2 and later releases, including the Service Releases, prior to 17.3R3-S3; 17.4 v
versions starting from 17.3R1-S1, 17.3R2 and later releases, including the Service Releases, prior to 17.3R3-S3; 17.4 versions starting from 17.4R1 and later releases, including the Service Releases, prior to 17.4R1-S6, 17.4R2-S2, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S2, 18.3R2; 18.4 versions prior to 18.4R1-S1, 18.4R2. This issue does not affect: Juniper Networks Junos OS 15.1 and 16.2. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10975
CVE ID: CVE-2019-0075 State: PUBLISHED Published: 2019-10-09T19:26:18.196483Z Last Updated: 2024-09-17T00:55:33.842Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: Denial of Service Description: A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing (PIM) messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases are Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D
are Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160; 17.3 versions prior to 17.3R3-S7 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R2; 18.3 versions prior to 18.3R2. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10976
CVE ID: CVE-2019-0086 State: PUBLISHED Published: 2019-05-17T15:41:38 Last Updated: 2024-08-04T17:37:07.698Z Vendors: n/a Products: Intel(R) Converged Security & Management Engine (CSME) Dynamic Application Loader, Intel (R) Trusted Execution Engine Interface (TXE) Problem Types: Escalation of Privilege Description: Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/e
ia local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f5.com/csp/article/K35815741 - https://danishcyberdefence.dk/blog/dal
CVE ID: CVE-2019-0087 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-0088 State: PUBLISHED Published: 2019-01-10T20:00:00Z Last Updated: 2024-09-17T02:56:38.018Z Vendors: Intel Corporation Products: Intel(R) System Support Utility for Windows Problem Types: Escalation of Privilege Description: Insufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may allow an authenticated user to potentially enable an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00212.html
CVE ID: CVE-2019-0089 State: PUBLISHED Published: 2019-05-17T15:41:38 Last Updated: 2024-08-04T17:37:07.564Z Vendors: n/a Products: Intel(R) Server Platform Services (SPS) Problem Types: Escalation of Privilege Description: Improper data sanitization vulnerability in subsystem in Intel(R) SPS before versions SPS_E5_04.00.04.381.0, SPS_E3_04.01.04.054.0, SPS_SoC-A_04.00.04.181.0, and SPS_SoC-X_04.00.04.086.0 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f5.com/csp/article/K47234311
CVE ID: CVE-2019-0090 State: PUBLISHED Published: 2019-05-17T15:41:38 Last Updated: 2024-08-04T17:37:07.524Z Vendors: n/a Products: Intel(R) Converged Security & Management Engine (CSME), Intel(R) Server Platform Services (SPS) Problem Types: Escalation of Privilege Description: Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x, 4.x, Intel(R) Server Platform Services 3.x, 4.x, Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/
via physical access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f5.com/csp/article/K59145983
CVE ID: CVE-2019-0091 State: PUBLISHED Published: 2019-05-17T15:41:38 Last Updated: 2024-08-04T17:37:07.384Z Vendors: n/a Products: Intel(R) Converged Security & Management Engine (CSME), Intel (R) Trusted Execution Engine Interface (TXE) Problem Types: Escalation of Privilege Description: Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f
: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f5.com/csp/article/K21423526
CVE ID: CVE-2019-0092 State: PUBLISHED Published: 2019-05-17T15:41:38 Last Updated: 2024-08-04T17:37:07.199Z Vendors: n/a Products: Intel(R) Active Management Technology (AMT) Problem Types: Escalation of Privilege Description: Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f5.com/csp/article/K84591451
CVE ID: CVE-2019-0093 State: PUBLISHED Published: 2019-05-17T15:41:38 Last Updated: 2024-08-04T17:37:07.342Z Vendors: n/a Products: Intel(R) Converged Security & Management Engine (CSME), Intel(R) Server Platform Services (SPS) Problem Types: Information Disclosure Description: Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-002
es: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f5.com/csp/article/K13710800
CVE ID: CVE-2019-0094 State: PUBLISHED Published: 2019-05-17T15:41:38 Last Updated: 2024-08-04T17:37:07.287Z Vendors: n/a Products: Intel(R) Active Management Technology (AMT) Problem Types: Denial of Service Description: Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f5.com/csp/article/K84591451
CVE ID: CVE-2019-0095 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-0096 State: PUBLISHED Published: 2019-05-17T15:41:38 Last Updated: 2024-08-04T17:37:07.542Z Vendors: n/a Products: Intel(R) Active Management Technology (AMT) Problem Types: Escalation of Privilege Description: Out of bound write vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to potentially enable escalation of privilege via adjacent network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f5.com/csp/article/K84591451
CVE ID: CVE-2019-0097 State: PUBLISHED Published: 2019-05-17T15:41:38 Last Updated: 2024-08-04T17:37:07.277Z Vendors: n/a Products: Intel(R) Active Management Technology (AMT) Problem Types: Denial of Service Description: Insufficient input validation vulnerability in subsystem for Intel(R) AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f5.com/csp/article/K84591451
CVE ID: CVE-2019-0098 State: PUBLISHED Published: 2019-05-17T15:41:38 Last Updated: 2024-08-04T17:37:07.822Z Vendors: n/a Products: Intel(R) Converged Security & Management Engine (CSME), Intel (R) Trusted Execution Engine Interface (TXE) Problem Types: Escalation of Privilege Description: Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f5.com/csp/article/K105220
ww.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f5.com/csp/article/K10522033
CVE ID: CVE-2019-0099 State: PUBLISHED Published: 2019-05-17T15:41:38 Last Updated: 2024-08-04T17:37:07.916Z Vendors: n/a Products: Intel(R) Server Platform Services (SPS), Intel (R) Trusted Execution Engine Interface (TXE) Problem Types: Escalation of Privilege Description: Insufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00213.html - https://support.f5.com/csp/article/K30105730
CVE ID: CVE-2019-0100 State: REJECTED Published: N/A Last Updated: 2023-02-28T00:00:00 Description: No description available.
CVE ID: CVE-2019-0101 State: PUBLISHED Published: 2019-02-18T17:00:00Z Last Updated: 2024-09-17T01:15:34.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authentication bypass in the Intel Unite(R) solution versions 3.2 through 3.3 may allow an unauthenticated user to potentially enable escalation of privilege to the Intel Unite(R) Solution administrative portal via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00214.html - http://www.securityfocus.com/bid/107076
CVE ID: CVE-2019-0102 State: PUBLISHED Published: 2019-02-18T17:00:00Z Last Updated: 2024-09-16T17:57:52.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01 - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html - http://www.securityfocus.com/bid/107069 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.ht
tml - http://www.securityfocus.com/bid/107069 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.html
CVE ID: CVE-2019-0103 State: PUBLISHED Published: 2019-02-18T17:00:00Z Last Updated: 2024-09-16T23:36:54.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient file protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107074 - https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01 - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html
CVE ID: CVE-2019-0104 State: PUBLISHED Published: 2019-02-18T17:00:00Z Last Updated: 2024-09-17T01:56:59.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient file protection in uninstall routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107109 - https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01 - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html
CVE ID: CVE-2019-0105 State: PUBLISHED Published: 2019-02-18T17:00:00Z Last Updated: 2024-09-16T23:11:53.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01 - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html - http://www.securityfocus.com/bid/107069
CVE ID: CVE-2019-0106 State: PUBLISHED Published: 2019-02-18T17:00:00Z Last Updated: 2024-09-16T18:23:16.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient run protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01 - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html - http://www.securityfocus.com/bid/107069
CVE ID: CVE-2019-0107 State: PUBLISHED Published: 2019-02-18T17:00:00Z Last Updated: 2024-09-16T19:01:47.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient user prompt in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01 - https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html - http://www.securityfocus.com/bid/107069