Lucene search

[email protected]CVE-2023-29242

HistoryMay 12, 2023 - 3:15 p.m.

CVE-2023-29242

2023-05-1215:15:09

CWE-284

[email protected]

web.nvd.nist.gov

cve-2023-29242

intel

oneapi toolkits

access control

privilege escalation

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper access control for Intel® oneAPI Toolkits before version 2021.1 Beta 10 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Vulners

NVD

Node

inteloneapi_toolkitsRange<2021.1

inteloneapi_toolkitsRange<10

CPENameOperatorVersion
intel:oneapi_ai_analytics_toolkitintel oneapi ai analytics toolkitle2021.1
intel:oneapi_base_toolkitintel oneapi base toolkitle2021.1
intel:oneapi_dl_framework_developer_toolkitintel oneapi dl framework developer toolkitle2021.1
intel:oneapi_hpc_toolkitintel oneapi hpc toolkitle2021.1
intel:oneapi_iot_toolkitintel oneapi iot toolkitle2021.1
intel:oneapi_rendering_toolkitintel oneapi rendering toolkitle2021.1

CPE	Name	Operator	Version
intel:oneapi_ai_analytics_toolkit	intel oneapi ai analytics toolkit	le	2021.1
intel:oneapi_base_toolkit	intel oneapi base toolkit	le	2021.1
intel:oneapi_dl_framework_developer_toolkit	intel oneapi dl framework developer toolkit	le	2021.1
intel:oneapi_hpc_toolkit	intel oneapi hpc toolkit	le	2021.1
intel:oneapi_iot_toolkit	intel oneapi iot toolkit	le	2021.1
intel:oneapi_rendering_toolkit	intel oneapi rendering toolkit	le	2021.1

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) oneAPI Toolkits",
    "versions": [
      {
        "version": "before version 2021.1 Beta 10",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00551.html

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2023-29242

nvd1 prion1 cvelist1 intel1