Intel ID:	INTEL-SA-00136
Product family:	Intel® Saffron
Impact of vulnerability:	Escalation of Privilege
Severity rating:	Important
Original release:	06/26/2018
Last revised:	06/26/2018

Summary:

CVE-2018-3662

• Escalation of privilege in Intel® Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Saffron application to execute arbitrary code as root.
• 8.4 High CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVE-2018-3671

• Escalation of privilege in Intel® Saffron admin application allows an authenticated user to access unauthorized information.
• 4.1 Medium CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CVE-2018-3663

• Escalation of privilege in Intel® Saffron MemoryBase allows an authenticated user access to privileged information.
• 6.8 Medium CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CVE-2012-3448

• Intel® Saffron MemoryBase has updated Ganglia to address CVE-2012-3448

Affected products:

Intel® Saffron MemoryBase before 11.4

Recommendations:

Intel recommends that users of the Intel® Saffron MemoryBase update to version 11.4 or later.

Revision History

Revision	Date	Description
1.0	6/26/2018	Initial Release

CVE Name: CVE-2018-3662, CVE-2018-3671, CVE-2018-3663

Source: INTEL-SA-00136

Posted By: Brink
27 Jun 2018