Lucene search
HistoryMay 12, 2023 - 3:15 p.m.
CVE-2023-29242
intel oneapi toolkits
improper access control
privilege escalation
local access
cve-2023-29242
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Improper access control for Intel® oneAPI Toolkits before version 2021.1 Beta 10 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
Node
inteloneapi_ai_analytics_toolkitRange≤2021.1
ORinteloneapi_base_toolkitRange≤2021.1
ORinteloneapi_dl_framework_developer_toolkitRange≤2021.1
ORinteloneapi_hpc_toolkitRange≤2021.1
ORinteloneapi_iot_toolkitRange≤2021.1
ORinteloneapi_rendering_toolkitRange≤2021.1
Related
intel
intel
Intel® oneAPI Toolkit Advisory
2021-11-09 00:00:00
prion
prion
Improper access control
2023-05-12 15:15:00
cvelist
cvelist
CVE-2023-29242
2023-05-12 14:01:46
cve
cve
CVE-2023-29242
2023-05-12 15:15:09
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Related for NVD:CVE-2023-29242