HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2023-24592

CVSS 7.3v3.1pub. 2023-11-14upd. 2024-11-21

Path traversal in the some Intel(R) oneAPI Toolkits and Component software before version 2023.1 may allow authenticated user to potentially enable escalation of privilege via local access.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

  • Intel Advisor

    APP
    Intel
    < 2023.1

  • Intel Inspector

    APP
    Intel
    < 2023.1

  • Intel Mpi Library

    APP
    Intel
    < 2023.1

  • Intel Oneapi Base Toolkit

    APP
    Intel
    < 2023.1

  • Intel Oneapi Hpc Toolkit

    APP
    Intel
    < 2023.1
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2023-35121HIGH7.8ten sam produkt

Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) on...

CVE-2023-30763HIGH7.2ten sam produkt

Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to ...

CVE-2023-23569HIGH7.8ten sam produkt

Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 pu...

CVE-2022-21128HIGH7.8ten sam produkt

Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an aut...

CVE-2021-33129HIGH7.8ten sam produkt

Incorrect default permissions in the software installer for the Intel(R) Advisor before version 2021.4.0 may a...