Intel Data Center Manager SDK CVE-2019-0111 Local Insecure File Permissions Vulnerability

Bugtraq ID:	107067
Class:	Design Error
CVE:	CVE-2019-0111
Remote:	No
Local:	Yes
Published:	Feb 12 2019 12:00AM
Updated:	Feb 12 2019 12:00AM
Credit:	DCG Red Team.
Vulnerable:	Intel Data Center Manager SDK 0
Not Vulnerable:	Intel Data Center Manager SDK 5.0.2

Intel Data Center Manager SDK CVE-2019-0111 Local Insecure File Permissions Vulnerability

Intel Data Center Manager SDK is prone to local insecure file-permissions vulnerability.

A local attacker can exploit this issue to gain elevated privileges on an affected system.

Intel Data Center Manager SDK versions prior to 5.0.2 are vulnerable.

Intel Data Center Manager SDK CVE-2019-0111 Local Insecure File Permissions Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Intel Data Center Manager SDK CVE-2019-0111 Local Insecure File Permissions Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Intel Data Center Manager SDK CVE-2019-0111 Local Insecure File Permissions Vulnerability

References:

• Intel Homepage (Intel)
  
• Intel® Data Center Manager SDK Advisory (Intel)