CVE-2019-11119: Critical severity intel raid web console 3 vulnerability

Q: What is CVE-2019-11119?

CVE-2019-11119 is a vulnerability in Intel(R) RWC3 version 4.186 and before that allows an unauthenticated user to potentially enable privilege escalation via network access.

Q: How severe is CVE-2019-11119?

CVE-2019-11119 has a severity of 9.8 out of 10, which is classified as critical.

Q: How can an unauthenticated user exploit CVE-2019-11119?

An unauthenticated user can exploit CVE-2019-11119 by leveraging insufficient session validation in the service API of Intel(R) RWC3 version 4.186 and before.

Q: Which version of Intel Raid Web Console is affected by CVE-2019-11119?

CVE-2019-11119 affects Intel Raid Web Console version 4.186 and earlier.

Q: Where can I find more information about CVE-2019-11119?

You can find more information about CVE-2019-11119 at the SecurityFocus and Intel Security Center websites.

Published Jun 13, 2019

Updated

Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected Software

1 affected component

Intel Raid Web Console 3 Windows<=4.186

Remediation

Patch Available

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00259.html

Event History

Jun 13, 2019

CVE Published

via MITRE·03:36 PM

Data Sourced

via MITRE·03:36 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-11119?

CVE-2019-11119 is a vulnerability in Intel(R) RWC3 version 4.186 and before that allows an unauthenticated user to potentially enable privilege escalation via network access.

How severe is CVE-2019-11119?