CVE-2018-12161 Information disclosure in Intel RAID Web Server 3
An unauthenticated attacker can disclose sensitive information via network access due to insufficient session validation in Intel RAID Web Server 3.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2018-12161?
CVE-2018-12161 is a medium-severity vulnerability in Intel RAID Web Server 3, published on 10 Oct 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Insufficient session validation in the webserver component of the Intel Rapid Web Server 3 may allow an unauthenticated user to potentially disclose information via network access.
Weakness: CWE-200
Which versions are affected by CVE-2018-12161?
It affects 1 product.
Products include Intel Raid Web Console.
How do I fix CVE-2018-12161?
No fix has been published for CVE-2018-12161 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-12161 being exploited?
There is no known exploitation of CVE-2018-12161 in the wild and no public exploit code.
Other vulnerabilities in Intel RAID Web Server 3
- CVE-2024-34153 Privilege escalation in Intel(R) RAID Web Console software
- CVE-2024-34543 Privilege escalation in Intel(R) RAID Web Console software
- CVE-2024-32940 Missing authorization in Intel(R) RAID Web Console software
- CVE-2024-33848 Denial of service in Intel(R) RAID Web Console software
- CVE-2024-34545 Information disclosure in Intel(R) RAID Web Console software
Sources
Also known as GHSA-qhvr-xxw2-7x35.