Insufficient Session Validation in Intel RWC3 Service API
CVE-2019-11119

9.8CRITICAL

Key Information:

Vendor
Intel
Status
Intel(r) Raid Web Console 3 For Windows*
Vendor
CVE Published:
13 June 2019

Summary

The Intel RWC3 service API is susceptible to insufficient session validation. An unauthenticated user may exploit this vulnerability to potentially escalate privileges through network access, allowing unauthorized control over the affected system. This flaw emphasizes the need for robust session management practices to prevent unauthorized access and elevation of privileges.

Affected Version(s)

Intel(R) RAID Web Console 3 for Windows* Version before 7.009.011.000

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/108780
vdb-entryx_refsource_BID

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.