Lucene search
HistoryMay 16, 2024 - 9:16 p.m.
CVE-2024-22379
cve-2024-22379
uncontrolled search path
intel(r) inspector
escalation of privilege
local access
authenticated user
nvd
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Uncontrolled search path in some Intel® Inspector software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
Node
intelinspectorRange<2024.0
CNA Affected
[
{
"vendor": "n/a",
"product": "Intel(R) Inspector software",
"versions": [
{
"version": "before version 2024.0",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for CVE-2024-22379