CVE-2019-0135

Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206

Score

CVSS 3.1 7.8 High

Status

Modified - secure@intel.com

Published

2019-03-14

Last modified

2024-08-04

Weaknesses

CWE-264

Affected products

• Rapid Storage Technology Enterprise (Intel)
• Thinkstation P520 Firmware (Lenovo)
• Thinkstation P520c Firmware (Lenovo)
• Thinkstation P720 Firmware (Lenovo)
• Thinkstation P920 Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-27843
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00231.html