CVE-2019-11117

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper permissions in the installer for Intel(R) Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to potentially enable escalation of privilege via local attack.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	Intel(R) Omni-Path Fabric Manager GUI	Version before 10.9.2.1.1

References

http://www.securityfocus.com/bid/108788Broken Link, Third Party Advisory, VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/inVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00257.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/108788Broken Link, Third Party Advisory, VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/inVendor Advisory

Timeline

Published: Jun 13, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-111199.8Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potential CVE-2019-11125.5An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In CVE-2019-111207.8Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an authenticated user t CVE-2019-111217.8Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an authenticated user to CVE-2019-111236.7Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of priv CVE-2019-111246.7Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, d CVE-2019-111256.7Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privil CVE-2019-111266.7Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial CVE-2019-111276.7Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of CVE-2019-111286.7Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privil CVE-2019-111296.7Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, d CVE-2019-11138.8A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s