CVE-2020-12334

EPSS 0.04%
Published 12.11.2020 19:15:13
Last modified 21.11.2024 04:59:32
Source secure@intel.com
Teams watchlist Login
Open Login

Improper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Intel ≫ Advisor Tools Version <= 2020

Intel ≫ Advisor Tools Version2020 Updateupdate_1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.04%	0.078

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-281 Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00417

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-12334

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-12334

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-12334

EUVD