Improper Access Control in Intel RAID Web Console
CVE-2024-28170

5.5MEDIUM

Key Information:

Vendor

Intel
Status
Raid Web Console
Vendor
CVE Published:
16 September 2024

What is CVE-2024-28170?

An access control vulnerability exists in Intel(R) RAID Web Console that may allow an authenticated user to gain unauthorized access to sensitive information via local access. This issue could potentially lead to information disclosure, posing a significant risk to data integrity and confidentiality.

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.