Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow authenticated user to potentially enable escalation of privilege via local access.
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Link | Tags |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-19-050-01 | us government resource third party advisory mitigation |
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00215.html | vendor advisory |
http://www.securityfocus.com/bid/107069 | vdb entry third party advisory |