CVE-2019-0130

Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access.

Score

CVSS 3.1 7.4 High

Status

Modified - secure@intel.com

Published

2019-06-13

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Rapid Storage Technology Enterprise (Intel)
• Thinkstation P520 Firmware (Lenovo)
• Thinkstation P520c Firmware (Lenovo)
• Thinkstation P720 Firmware (Lenovo)
• Thinkstation P920 Firmware (Lenovo)

References

• http://www.securityfocus.com/bid/108775
• https://support.lenovo.com/us/en/product_security/LEN-27843
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html