CVE-2023-24592

2023-11-1419:15:18

CWE-22

[email protected]

web.nvd.nist.gov

cve-2023-24592

path traversal

intel

oneapi toolkits

component software

escalation of privilege

security vulnerability

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.6%

JSON

Path traversal in the some Intel® oneAPI Toolkits and Component software before version 2023.1 may allow authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

NVD

Node

inteladvisorRange<2023.1

intelinspectorRange<2023.1

intelmpi_libraryRange<2023.1

inteloneapi_base_toolkitRange<2023.1

inteloneapi_hpc_toolkitRange<2023.1

CPENameOperatorVersion
intel:advisorintel advisorlt2023.1
intel:inspectorintel inspectorlt2023.1
intel:mpi_libraryintel mpi librarylt2023.1
intel:oneapi_base_toolkitintel oneapi base toolkitlt2023.1
intel:oneapi_hpc_toolkitintel oneapi hpc toolkitlt2023.1

CPE	Name	Operator	Version
intel:advisor	intel advisor	lt	2023.1
intel:inspector	intel inspector	lt	2023.1
intel:mpi_library	intel mpi library	lt	2023.1
intel:oneapi_base_toolkit	intel oneapi base toolkit	lt	2023.1
intel:oneapi_hpc_toolkit	intel oneapi hpc toolkit	lt	2023.1

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) oneAPI Toolkits and Component software",
    "versions": [
      {
        "version": "before version 2023.1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]