cnvd - cnvd-2020-66316

cnvd-2020-66316

Vulnerability from cnvd

Title: Intel Data Center Manager Console信息泄露漏洞

Description:

Intel Data Center Manager SDK是美国英特尔（Intel）公司的一款数据中心管理SDK（软件开发工具包）。该产品主要提供设备实时电源和散热数据。

Intel(R) Data Center Manager Console 3.6.2之前版本存在信息泄露漏洞，该漏洞源于输入验证未能正确，允许经过身份验证的用户潜在地通过网络访问启用信息公开。

Severity: 中

Patch Name: Intel Data Center Manager Console信息泄露漏洞的补丁

Patch Description:

Intel Data Center Manager SDK是美国英特尔（Intel）公司的一款数据中心管理SDK（软件开发工具包）。该产品主要提供设备实时电源和散热数据。

Intel(R) Data Center Manager Console 3.6.2之前版本存在信息泄露漏洞，该漏洞源于输入验证未能正确，允许经过身份验证的用户潜在地通过网络访问启用信息公开。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430.html

Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-8669

Impacted products

Name
Intel Data Center Manager Console <3.6.2

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-8669",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-8669"
    }
  },
  "description": "Intel Data Center Manager SDK\u662f\u7f8e\u56fd\u82f1\u7279\u5c14\uff08Intel\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u6570\u636e\u4e2d\u5fc3\u7ba1\u7406SDK\uff08\u8f6f\u4ef6\u5f00\u53d1\u5de5\u5177\u5305\uff09\u3002\u8be5\u4ea7\u54c1\u4e3b\u8981\u63d0\u4f9b\u8bbe\u5907\u5b9e\u65f6\u7535\u6e90\u548c\u6563\u70ed\u6570\u636e\u3002\n\nIntel(R) Data Center Manager Console 3.6.2\u4e4b\u524d\u7248\u672c\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u8f93\u5165\u9a8c\u8bc1\u672a\u80fd\u6b63\u786e\uff0c\u5141\u8bb8\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u6f5c\u5728\u5730\u901a\u8fc7\u7f51\u7edc\u8bbf\u95ee\u542f\u7528\u4fe1\u606f\u516c\u5f00\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-66316",
  "openTime": "2020-11-25",
  "patchDescription": "Intel Data Center Manager SDK\u662f\u7f8e\u56fd\u82f1\u7279\u5c14\uff08Intel\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u6570\u636e\u4e2d\u5fc3\u7ba1\u7406SDK\uff08\u8f6f\u4ef6\u5f00\u53d1\u5de5\u5177\u5305\uff09\u3002\u8be5\u4ea7\u54c1\u4e3b\u8981\u63d0\u4f9b\u8bbe\u5907\u5b9e\u65f6\u7535\u6e90\u548c\u6563\u70ed\u6570\u636e\u3002\r\n\r\nIntel(R) Data Center Manager Console 3.6.2\u4e4b\u524d\u7248\u672c\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u8f93\u5165\u9a8c\u8bc1\u672a\u80fd\u6b63\u786e\uff0c\u5141\u8bb8\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u6f5c\u5728\u5730\u901a\u8fc7\u7f51\u7edc\u8bbf\u95ee\u542f\u7528\u4fe1\u606f\u516c\u5f00\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Intel Data Center Manager Console\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Intel Data Center Manager Console \u003c3.6.2"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-8669",
  "serverity": "\u4e2d",
  "submitTime": "2020-11-16",
  "title": "Intel Data Center Manager Console\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}

CVE-2020-8669 (GCVE-0-2020-8669)

Vulnerability from cvelistv5

Published

2020-11-12 18:55

Modified

2024-08-04 10:03

Severity ?

CWE

information disclosure

Summary

Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access.

References

▼	URL	Tags
	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	Intel(R) Data Center Manager Console	Version: before version 3.6.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:03:46.370Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Data Center Manager Console",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before version 3.6.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-11-12T18:55:14",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-8669",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Data Center Manager Console",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before version 3.6.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-8669",
    "datePublished": "2020-11-12T18:55:14",
    "dateReserved": "2020-02-06T00:00:00",
    "dateUpdated": "2024-08-04T10:03:46.370Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted