Lucene search
HistoryNov 11, 2022 - 4:15 p.m.
CVE-2022-27638
cve-2022-27638
intel
link analyzer pro
privilege escalation
uncontrolled search path
local access
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
12.6%
Uncontrolled search path element in the Intel® Advanced Link Analyzer Pro before version 22.2 and Standard edition software before version 22.1.1 STD may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
Node
inteladvanced_link_analyzerRange<22.1.1standard
ORinteladvanced_link_analyzerRange<22.2pro
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intel | advanced_link_analyzer | * | cpe:2.3:a:intel:advanced_link_analyzer:*:*:*:*:standard:*:*:* |
| intel | advanced_link_analyzer | * | cpe:2.3:a:intel:advanced_link_analyzer:*:*:*:*:pro:*:*:* |
Related
intel
intel
Intel® Advanced Link Analyzer Advisory
2022-11-08 00:00:00
cve
cve
CVE-2022-27638
2022-11-11 16:15:13
prion
prion
Privilege escalation
2022-11-11 16:15:00
cvelist
cvelist
CVE-2022-27638
2022-11-11 15:48:39
cnvd
cnvd
Intel Advanced Link Analyzer Elevation of Privilege Vulnerability
2022-11-16 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
12.6%
Related for NVD:CVE-2022-27638