Insufficient Session Validation in Intel Baseboard Management Controller Firmware
CVE-2019-11168

9.1CRITICAL

Key Information:

Vendor

Intel
Status
Intel(r) Bmc
Vendor
CVE Published:
14 November 2019

What is CVE-2019-11168?

The Intel Baseboard Management Controller firmware has shown weaknesses in session validation processes. An unauthenticated user could exploit these vulnerabilities to gain unauthorized access, potentially leading to information disclosure or a denial of service situation. This threat emphasizes the importance of robust session management practices to safeguard sensitive information and ensure system integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Intel(R) BMC See provided reference

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC
https://support.f5.com/csp/article/K64346530?utm_source=f...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.