cvelist/2018/3xxx/CVE-2018-3703.json

{
   "CVE_data_meta" : {
      "ASSIGNER" : "secure@intel.com",
      "DATE_PUBLIC" : "2019-01-08T00:00:00",
      "ID" : "CVE-2018-3703",
      "STATE" : "PUBLIC"
   },
   "affects" : {
      "vendor" : {
         "vendor_data" : [
            {
               "product" : {
                  "product_data" : [
                     {
                        "product_name" : "Intel(R) SSD Data Center Tool for Windows",
                        "version" : {
                           "version_data" : [
                              {
                                 "version_value" : "before v3.0.17."
                              }
                           ]
                        }
                     }
                  ]
               },
               "vendor_name" : "Intel Corporation"
            }
         ]
      }
   },
   "data_format" : "MITRE",
   "data_type" : "CVE",
   "data_version" : "4.0",
   "description" : {
      "description_data" : [
         {
            "lang" : "eng",
            "value" : "Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access."
         }
      ]
   },
   "problemtype" : {
      "problemtype_data" : [
         {
            "description" : [
               {
                  "lang" : "eng",
                  "value" : "Escalation of Privilege"
               }
            ]
         }
      ]
   },
   "references" : {
      "reference_data" : [
         {
            "name" : "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00207.html",
            "refsource" : "CONFIRM",
            "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00207.html"
         }
      ]
   }
}