Intel® Saffron MemoryBase Update

Summary:

CVE-2018-3662

• Escalation of privilege in Intel® Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Saffron application to execute arbitrary code as root.
• 8.4 High CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVE-2018-3671

• Escalation of privilege in Intel® Saffron admin application allows an authenticated user to access unauthorized information.
• 4.1 Medium CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CVE-2018-3663

• Escalation of privilege in Intel® Saffron MemoryBase allows an authenticated user access to privileged information.
• 6.8 Medium CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CVE-2012-3448

• Intel® Saffron MemoryBase has updated Ganglia to address CVE-2012-3448

Affected products:

Intel® Saffron MemoryBase before 11.4

Recommendations:

Intel recommends that users of the Intel® Saffron MemoryBase update to version 11.4 or later.