Read the docs
TI-2019-08320 Aliases CVE-2019-11119GHSA-g5fh-m6cw-wmwm

Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and…

Priority MEDIUM 46Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Why it matters now

EPSS 0.01996 80th percentileScored 2026-11-07
Fix Fixed Intel(R) RAID Web Console 3 for Windows*: 7.009.011.000

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Intel(R) RAID Web Console 3 for Windows*before 7.009.011.0007.009.011.000Patch availableCNA
  • Intel(R) RAID Web Console 3 for Windows* Vendor— Affected before 7.009.011.000 Fixed in 7.009.011.000 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:intel:raid_web_console_3:*:*:*:*:*:windows:*:*up to 4.186VulnerableIntel
  • cpe:2.3:a:intel:raid_web_console_3:*:*:*:*:*:windows:*:* Versions up to 4.186 Vulnerable ·Intel

Remediation

  • Fix · CNA Intel(R) RAID Web Console 3 for Windows* Fixed in 7.009.011.000

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-11119
  2. 2026-10-03 Alias added: GHSA-g5fh-m6cw-wmwm

References

Patch 1

  • TI-2020-06961 Improper input validation in Intel RAID Web Console 3 for Windows* Advisory CVSS 3.1HIGH 7.5
  • TI-2020-00547 Incorrect default permissions in Intel® RAID Web Console 3 for Windows CVSS 3.1HIGH 7.8
  • TI-2019-10867 Incorrect default permissions in Intel RWC 3 for Windows CVSS 3.1HIGH 7.8
  • TI-2018-02701 Cross-site scripting in Intel RAID Web Console v3 CVSS 3.0MEDIUM 6.1
  • TI-2018-02698 Improper authentication in Intel RAID Web Console v3 for Windows CVSS 3.0MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences