Improper Access Control in Intel RAID Web Console Software
CVE-2024-36261

5.7MEDIUM

Key Information:

Vendor
Intel
Status
Raid Web Console
Vendor
CVE Published:
16 September 2024

Summary

The Intel RAID Web Console software is subject to an improper access control vulnerability, which can allow authenticated users to exploit adjacent access points. This flaw potentially enables these users to initiate denial of service scenarios, affecting the availability of the service. Proper access controls should be enforced to mitigate these risks and ensure system integrity.

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.