high7.4
CVE-2019-0130
Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potenti…
Impact
Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Rapid Storage Technology Enterprise | before 5.5.0.2015 |
| Lenovo | Thinkstation P520 Firmware | All versions |
| Lenovo | Thinkstation P520c Firmware | All versions |
| Lenovo | Thinkstation P720 Firmware | All versions |
| Lenovo | Thinkstation P920 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/108775
- https://support.lenovo.com/us/en/product_security/LEN-27843
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html
- http://www.securityfocus.com/bid/108775
- https://support.lenovo.com/us/en/product_security/LEN-27843
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html