Lucene search

[email protected]CVE-2023-27383

HistoryNov 14, 2023 - 7:15 p.m.

CVE-2023-27383

2023-11-1419:15:20

CWE-693

[email protected]

web.nvd.nist.gov

cve-2023-27383

intel

oneapi

hpc toolkit

mpi library

software

privilege escalation

protection mechanism

security vulnerability

6.8 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Protection mechanism failure in some Intel® oneAPI HPC Toolkit 2023.1 and Intel®MPI Library software before version 2021.9 may allow a privileged user to potentially enable escalation of privilege via adjacent access.

Affected configurations

NVD

Node

inteladvisorRange<2023.1

intelinspectorRange<2023.1

intelmpi_libraryRange<2021.9

inteloneapi_base_toolkitRange<2023.1

inteloneapi_hpc_toolkitRange<2023.1

CPENameOperatorVersion
intel:advisorintel advisorlt2023.1
intel:inspectorintel inspectorlt2023.1
intel:mpi_libraryintel mpi librarylt2021.9
intel:oneapi_base_toolkitintel oneapi base toolkitlt2023.1
intel:oneapi_hpc_toolkitintel oneapi hpc toolkitlt2023.1

CPE	Name	Operator	Version
intel:advisor	intel advisor	lt	2023.1
intel:inspector	intel inspector	lt	2023.1
intel:mpi_library	intel mpi library	lt	2021.9
intel:oneapi_base_toolkit	intel oneapi base toolkit	lt	2023.1
intel:oneapi_hpc_toolkit	intel oneapi hpc toolkit	lt	2023.1

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library software",
    "versions": [
      {
        "version": "before version 2021.9",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]