CVE-2021-33129

Incorrect default permissions in the software installer for the IntelR Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33129

CVE-2021-33129 affects Intel® Advisor prior to version 2021.4.0. The root cause is incorrect default permissions in the software installer, which may allow an authenticated user to escalate privileges via local access. Per the Intel advisory, the CVSS v3.1 base score is 7.8 (HIGH) with local atta...

CVE-2021-23152

Improper access control in the IntelR Advisor software before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-23152

CVE-2021-23152 affects Intel® Advisor software prior to 2021.2. It is a local, authenticated-access vulnerability caused by improper access control that could allow privilege escalation (impact: high for confidentiality, integrity, and availability). The NVD CVSSv3.1 base score is 7.8 (HIGH); CVS...

CVE-2021-33129: Incorrect Default Permissions

Incorrect default permissions in the software installer for the IntelR Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-9365

Name of the Vulnerable Software and Affected Versions IntelR Advisor versions prior to 2021.2 Description The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations For versions prior to...

PT-2022-10211

Name of the Vulnerable Software and Affected Versions IntelR Advisor versions prior to 2021.4.0 Description The issue is related to incorrect default permissions in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-23152: Undefined Security Weakness

Improper access control in the IntelR Advisor software before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Advisor 安全漏洞

Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation. A security vulnerability exists in Intel Advisor that stems from incorrect default permissions in the software installer IntelR Advisor prior to version 2021.4.0 may allow authenticated users ...

Intel Advisor 安全漏洞

Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation USA. A security vulnerability exists in the Intel Advisor software that stems from a potential security flaw in the Intel Advisor software that could allow escalation of privileges...

Intel® Advisor Software Advisory

Summary: A potential security vulnerability in the Intel® Advisor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-23152 Description: Improper access control in the IntelR Advisor...

Intel® Advisor Advisory

Summary: A potential security vulnerability in the Intel® Advisor may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33129 Description: Incorrect default permissions in the software installer for...

Security Bulletin: IBM Cloud Transformation Advisor, which is bundled with IBM WebSphere Hybrid Edition, has addressed multiple security vulnerabilities.

Summary IBM Cloud Transformation Advisor, which is bundled with IBM Websphere Hybrid Edition, has addressed multiple security vulnerabilities CVE-2021-35517, CVE-2021-36090, CVE-2021-45105, CVE-2021-45046, CVE-2021-22960, CVE-2021-35560, CVE-2021-35586, CVE-2021-35578, CVE-2021-35564,...

Security Bulletin: IBM Cloud Transformation Advisor, which is bundled with IBM Cloud Pak for Applications, has addressed multiple security vulnerabilities.

Summary IBM Cloud Transformation Advisor, which is bundled with IBM Cloud Pak for Applications, has addressed multiple security vulnerabilities CVE-2021-35517, CVE-2021-36090, CVE-2021-45105, CVE-2021-45046, CVE-2021-22960, CVE-2021-35560, CVE-2021-35586, CVE-2021-35578, CVE-2021-35564,...

Security Bulletin: IBM WebSphere Hybrid Edition is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-44228)

Summary IBM Cloud Transformation Advisor, which is bundled with IBM WebSphere Hybrid Edition, is affected by Apache Log4j vulnerability CVE-2021-44228. Log4j is used by IBM Cloud Transformation Advisor for generating logs in some components and tools. This bulletin provides a remediation for the...

Security Bulletin: IBM Cloud Pak for Applications is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-44228)

Summary Security Bulletin: IBM Cloud Transformation Advisor, which is bundled with IBM Cloud Pak for Applications, is affected by Apache Log4j vulnerability CVE-2021-44228. Log4j is used by IBM Cloud Transformation Advisor for generating logs in some components and tools. This bulletin provides a...

HPESBGN04215 rev.12 - Certain HPE Products using Apache Log4j, Remote Arbitrary Code Execution, Remote Code Execution, and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE XP Performance Advisor Software - 7.5 through 8.4 HPE SimpliVity 380 Gen10 VMware environment HPE SimpliVity 380 Gen9 VMware...

Schneider Electric SESU

1. EXECUTIVE SUMMARY CVSS v3 3.8 ATTENTION: Low attack complexity Vendor: Schneider Electric Equipment: Schneider Electric Software Update SESU Vulnerability: Insufficient Entropy 2. RISK EVALUATION Successful exploitation of this vulnerability could cause unintended connection from an internal...

Cross-site Scripting Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

Overview A Cross-site Scripting vulnerability was found in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official...

File Permission Vulnerability in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center

Overview A file permission vulnerability was found in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for...