6.7

CVE-2023-27391

Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Advisor For Oneapi Version < 2023.1
Intel ≫ Dpc++ Compatibility Tool Version < 2023.1
Intel ≫ Fortran Compiler Version < 2023.1
Intel ≫ Inspector For Oneapi Version < 2023.1
Intel ≫ Ipp Cryptography Version < 2021.7.0
Intel ≫ Mpi Library Version < 2021.9.0
Intel ≫ Oneapi Base Toolkit Version < 2023.1
Intel ≫ Oneapi Data Analytics Library Version < 2023.1
Intel ≫ Oneapi Dpc++/c++ Compiler Version < 2023.1
Intel ≫ Oneapi Dpc++ Library (onedpl) Version < 2022.1
Intel ≫ Oneapi Hpc Toolkit Version < 2023.1
Intel ≫ Oneapi Iot Toolkit Version < 2023.1
Intel ≫ Oneapi Math Kernel Library Version < 2023.1
Intel ≫ Oneapi Rendering Toolkit Version < 2023.1
Intel ≫ Oneapi Threading Building Blocks Version < 2021.9.0
Intel ≫ Open Image Denoise Version < 1.4.3
Intel ≫ Open Volume Kernel Library Version < 2023.1
Intel ≫ Ospray Version < 2023.1
Intel ≫ Ospray Studio Version < 2023.1
Intel ≫ Trace Analyzer And Collector Version < 2021.9.0
Intel ≫ Vtune Profiler For Oneapi Version < 2023.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.11
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
secure@intel.com 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.