CVE-2017-5738 Information disclosure in Unite App
An attacker with network access can cause denial of service and information disclosure in the Intel Unite App admin portal.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-5738?
CVE-2017-5738 is a critical vulnerability in Intel Corporation Unite App, published on 16 Nov 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Escalation of privilege vulnerability in admin portal for Intel Unite App versions 3.1.32.12, 3.1.41.18 and 3.1.45.26 allows an attacker with network access to cause a denial of service and/or information disclosure.
Weakness: CWE-200
Which versions are affected by CVE-2017-5738?
It affects 1 product.
Products include Intel Unite.
How do I fix CVE-2017-5738?
No fix has been published for CVE-2017-5738 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-5738 being exploited?
There is no known exploitation of CVE-2017-5738 in the wild and no public exploit code.
Other vulnerabilities in Intel Corporation Unite App
- CVE-2019-0172 Privilege escalation in Intel Unite(R) Client for Android
- CVE-2019-0101 Auth bypass in n/a
- CVE-2021-0098 Privilege escalation in Intel Unite(R) Client for Windows
- CVE-2021-0102 Privilege escalation in Intel Unite(R) Client for Windows
- CVE-2023-25773 Privilege escalation in Intel(R) Unite(R) Hub software installer for Windows
Sources
Also known as GHSA-76j8-5m68-735c.