Lucene search
HistoryAug 14, 2024 - 2:15 p.m.
CVE-2024-28876
uncontrolled search path
intel mpi library
privilege escalation
local access
cve-2024-28876
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.5%
Uncontrolled search path for some Intel® MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
Node
intelmpi_libraryRange<2021.12
ORinteloneapi_hpc_toolkitRange<2024.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intel | mpi_library | * | cpe:2.3:a:intel:mpi_library:*:*:*:*:*:*:*:* |
| intel | oneapi_hpc_toolkit | * | cpe:2.3:a:intel:oneapi_hpc_toolkit:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-28876
2024-08-14 14:15:25
cvelist
cvelist
CVE-2024-28876
2024-08-14 13:45:22
vulnrichment
vulnrichment
CVE-2024-28876
2024-08-14 13:45:22
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.5%
Related for NVD:CVE-2024-28876