Lucene search
IntelCVELIST:CVE-2023-28405HistoryAug 11, 2023 - 2:37 a.m.
CVE-2023-28405
2023-08-1102:37:09
CWE-427
intel
www.cve.org
1
cve-2023-28405
uncontrolled search path
intel distribution
openvino toolkit
escalation of privilege
local access
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.1%
Uncontrolled search path in the Intel® Distribution of OpenVINO™ Toolkit before version 2022.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CNA Affected
[
{
"vendor": "n/a",
"product": "Intel(R) Distribution of OpenVINO(TM) Toolkit",
"versions": [
{
"version": "before version 2022.3.0",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
intel
intel
Intel® Distribution of OpenVINO™ Toolkit Advisory
2023-08-08 00:00:00
cve
cve
CVE-2023-28405
2023-08-11 03:15:24
nvd
nvd
CVE-2023-28405
2023-08-11 03:15:24
prion
prion
Design/Logic Flaw
2023-08-11 03:15:00
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.1%
Related for CVELIST:CVE-2023-28405