Lucene search

[email protected]NVD:CVE-2023-28823

HistoryAug 11, 2023 - 3:15 a.m.

CVE-2023-28823

2023-08-1103:15:26

CWE-427

[email protected]

web.nvd.nist.gov

intel

oneapi toolkit

uncontrolled search path

privilege escalation

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

Percentile

9.0%

JSON

Uncontrolled search path in some Intel® oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd

Node

inteladvisor_for_oneapiRange<2023.1

intelcpu_runtime_for_opencl_applicationsRange<2023.1

inteldistribution_for_python_programming_languageRange<2023.1

inteldpc\+\+_compatibility_toolRange<2023.1

intelembree_ray_tracing_kernel_libraryRange<2023.1

intelfortran_compilerRange<2023.1

intelimplicit_spmd_program_compilerRange<1.19.1

intelinspector_for_oneapiRange<2023.1

intelintegrated_performance_primitivesRange<2021.8

intelipp_cryptographyRange<2021.7.0

intelmpi_libraryRange<2021.9.0

inteloneapi_base_toolkitRange<2023.1

inteloneapi_data_analytics_libraryRange<2023.1

inteloneapi_deep_neural_network_libraryRange<2023.1

inteloneapi_dpc\+\+\/c\+\+_compilerRange<2023.1

inteloneapi_dpc\+\+_library_\(onedpl\)Range<2022.1

inteloneapi_hpc_toolkitRange<2023.1

inteloneapi_iot_toolkitRange<2023.1

inteloneapi_math_kernel_libraryRange<2023.1

inteloneapi_rendering_toolkitRange<2023.1

inteloneapi_threading_building_blocksRange<2021.9.0

inteloneapi_toolkit_and_component_software_installerRange<4.3.1.493

inteloneapi_video_processing_libraryRange<2023.1

intelopen_image_denoiseRange<1.4.3

intelopen_volume_kernel_libraryRange<2023.1

intelosprayRange<2023.1

intelospray_studioRange<2023.1

inteltrace_analyzer_and_collectorRange<2021.9.0

intelvtune_profiler_for_oneapiRange<2023.1

VendorProductVersionCPE
inteladvisor_for_oneapi*cpe:2.3:a:intel:advisor_for_oneapi:*:*:*:*:*:*:*:*
intelcpu_runtime_for_opencl_applications*cpe:2.3:a:intel:cpu_runtime_for_opencl_applications:*:*:*:*:*:*:*:*
inteldistribution_for_python_programming_language*cpe:2.3:a:intel:distribution_for_python_programming_language:*:*:*:*:*:*:*:*
inteldpc\+\+_compatibility_tool*cpe:2.3:a:intel:dpc\+\+_compatibility_tool:*:*:*:*:*:*:*:*
intelembree_ray_tracing_kernel_library*cpe:2.3:a:intel:embree_ray_tracing_kernel_library:*:*:*:*:*:*:*:*
intelfortran_compiler*cpe:2.3:a:intel:fortran_compiler:*:*:*:*:*:*:*:*
intelimplicit_spmd_program_compiler*cpe:2.3:a:intel:implicit_spmd_program_compiler:*:*:*:*:*:*:*:*
intelinspector_for_oneapi*cpe:2.3:a:intel:inspector_for_oneapi:*:*:*:*:*:*:*:*
intelintegrated_performance_primitives*cpe:2.3:a:intel:integrated_performance_primitives:*:*:*:*:*:*:*:*
intelipp_cryptography*cpe:2.3:a:intel:ipp_cryptography:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	advisor_for_oneapi	*	cpe:2.3:a:intel:advisor_for_oneapi::::::::
intel	cpu_runtime_for_opencl_applications	*	cpe:2.3:a:intel:cpu_runtime_for_opencl_applications::::::::
intel	distribution_for_python_programming_language	*	cpe:2.3:a:intel:distribution_for_python_programming_language::::::::
intel	dpc\+\+_compatibility_tool	*	cpe:2.3:a:intel:dpc\+\+_compatibility_tool::::::::
intel	embree_ray_tracing_kernel_library	*	cpe:2.3:a:intel:embree_ray_tracing_kernel_library::::::::
intel	fortran_compiler	*	cpe:2.3:a:intel:fortran_compiler::::::::
intel	implicit_spmd_program_compiler	*	cpe:2.3:a:intel:implicit_spmd_program_compiler::::::::
intel	inspector_for_oneapi	*	cpe:2.3:a:intel:inspector_for_oneapi::::::::
intel	integrated_performance_primitives	*	cpe:2.3:a:intel:integrated_performance_primitives::::::::
intel	ipp_cryptography	*	cpe:2.3:a:intel:ipp_cryptography::::::::