PT-2023-24135

Name of the Vulnerable Software and Affected Versions Jenkins Tag Profiler Plugin versions 0.2 and earlier Description A missing permission check in the Jenkins Tag Profiler Plugin allows attackers with Overall/Read permission to reset profiler statistics. This issue also results in a cross-site...

CSRF vulnerability and missing permission checks in tag-profiler

tag-profiler 0.2 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to reset profiler statistics. Additionally, this HTTP endpoint does not require POST requests, resulting in a cross-site request forgery CSRF vulnerability. As ...

CVE-2022-41982

Uncontrolled search path element in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41982

Uncontrolled search path element in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41658

Insecure inherited permissions in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41658

Insecure inherited permissions in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Insecure inherited permissions in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path element in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41658

Insecure inherited permissions in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41658

CVE-2022-41658 affects Intel VTune Profiler prior to 2023.0. The issue is insecure inherited permissions that could enable privilege escalation via local access for an authenticated user. Publicly documented risk and impact come from Intel’s advisory and multiple vulnerability records, which indi...

CVE-2022-41658

Insecure inherited permissions in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41982

Uncontrolled search path element in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41982

CVE-2022-41982 affects Intel VTune Profiler prior to version 2023.0. The issue is an uncontrolled search path element that may allow an authenticated user to escalate privileges via local access. Intel’s advisory INTEL-SA-00771 and Red Hat/NVD entries corroborate the local, privilege-escalation i...

CVE-2022-41982

Uncontrolled search path element in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel VTune Profiler 安全漏洞

Intel VTune Profiler is a performance testing tool for optimized software from Intel USA. The software performs performance testing of IoT embedded applications, media software, Java applications, and high-performance computing applications. A security vulnerability exists in versions prior to...

Intel VTune Profiler 代码问题漏洞

Intel VTune Profiler is a performance testing tool for optimized software from Intel USA. The software performs performance testing of IoT embedded applications, media software, Java applications, and high-performance computing applications. A security vulnerability exists in Intel VTune Profiler...

PT-2023-14008 · Intel · Intel Vtune Profiler

Name of the Vulnerable Software and Affected Versions: IntelR VTuneTM Profiler versions prior to 2023.0 Description: The issue concerns insecure inherited permissions that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions...

PT-2023-14052 · Intel · Intel Vtune Profiler

Name of the Vulnerable Software and Affected Versions: IntelR VTuneTM Profiler versions prior to 2023.0 Description: The issue is related to an uncontrolled search path element in the IntelR VTuneTM Profiler software. This may allow an authenticated user to potentially enable escalation of...

CVE-2022-41658: Insecure Inherited Permissions

Insecure inherited permissions in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41982: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR VTuneTM Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access...