CVE-2019-0135
High
Description
Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206
SeverityHigh
CVSS7.8
Exploit probability—
ProductIntel Rapid Storage Technology Enterprise
PublishedMar 14, 2019
First seenMar 14, 2019
How to fix
Update
- intel rapid_storage_technology_enterprise5.5.0.2015 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel rapid_storage_technology_enterprise | v < 5.5.0.2015 | 5.5.0.2015 |
| lenovo thinkstation_p520_firmware | No range specified | — |
| lenovo thinkstation_p520c_firmware | No range specified | — |
| lenovo thinkstation_p720_firmware | No range specified | — |
| lenovo thinkstation_p920_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.