nvd-json-data-feeds/CVE-2023/CVE-2023-223xx/CVE-2023-22355.json

{
  "id": "CVE-2023-22355",
  "sourceIdentifier": "secure@intel.com",
  "published": "2023-05-10T14:15:27.240",
  "lastModified": "2024-11-21T07:44:37.140",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access."
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "secure@intel.com",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "HIGH",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9
      },
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      }
    ]
  },
  "weaknesses": [
    {
      "source": "secure@intel.com",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    },
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:advisor:*:*:*:*:*:oneapi:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "ACFF62CB-DC95-4A03-8886-E3DE682ECF45"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:cpu_runtime:*:*:*:*:*:opencl:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "65B36180-4945-4A43-B2AD-B917C6FA052C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:distribution_for_python:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "1CF57C55-C87E-428C-9634-158AA00C4717"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:dpc\\+\\+_compatibility_tool:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "EFA35C90-15A8-492A-82AA-EB90B5A64CC3"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:embree_ray_tracing_kernel_library:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "2B39BDDD-5AED-4E02-A856-330F54E7660A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:fortran_compiler:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "0160EA22-BD65-4674-97A0-D10CE4171895"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:implicit_spmd_program_compiler:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "1.18.1",
              "matchCriteriaId": "3CC2A97B-1E5D-4076-BC33-2137275B80EB"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:inspector:*:*:*:*:*:oneapi:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "FDDBD13A-D43F-4855-912A-D1AD78C42B63"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:integrated_performance_primitives:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2021.7",
              "matchCriteriaId": "1200A0B0-FE28-424D-B225-5A9FBA381F59"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:integrated_performance_primitives_cryptography:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2021.6.3",
              "matchCriteriaId": "92634595-EBED-490B-8C5D-E0628B5671C1"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:mpi_library:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2021.8",
              "matchCriteriaId": "73AD7DE0-4634-4760-863D-705CEFF0D531"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_base_toolkit:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "77F68C74-6AEB-4586-A9A1-2AA4CABC992D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_data_analytics_library:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "6DDFCC4E-E137-40BA-B6A3-9650D8FB9DA9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_deep_neural_network_library:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "12E76EDE-CA0D-4861-80EE-A7A860F2F6AE"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_dpc\\+\\+\\/c\\+\\+_compiler:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "91F934F2-5D53-449D-8033-31C01BF99A1E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_dpc\\+\\+_library:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2022.0",
              "matchCriteriaId": "DF697BE5-6DDE-40AD-853F-CA1C05638E1C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_hpc_toolkit:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0.0",
              "matchCriteriaId": "6728C973-7E1D-46EB-BE07-E572A09B5D96"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_hpc_toolkit:2023.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0726E01-A9D7-4D32-92C5-4D7673A7DDC3"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_iot_toolkit:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "04049E09-EA46-4270-844A-722AD33E9305"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_math_kernel_library:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "42A7BFFF-DEB1-42F4-984F-3462DEF40A41"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_rendering_toolkit:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "9962AA12-66F5-4545-88FE-2EF3A671E904"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_threading_building_blocks:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2021.8",
              "matchCriteriaId": "85C9E5C6-95FA-4C62-B18A-13FAE13E3AD5"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_toolkit_and_component_software_installers:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "4.3.0.251",
              "matchCriteriaId": "850130A2-4C4D-4E0A-A5B6-62619B673290"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:oneapi_video_processing_library:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "06201FF4-6ED4-4E41-A356-738A4E5F8AEC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:open_image_denoise:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "1.4.3",
              "matchCriteriaId": "65B820BD-07FB-48AC-B3E4-F3DCAB991C9B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:open_volume_kernel_library:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "8D7C18F6-10F1-49DC-93BC-C5A0A170F404"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:ospray:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "0DA13265-18CF-46A0-89FE-2249E9DAF597"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:ospray_studio:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "1BABB997-985A-4BAC-93CA-FB7CD0CE545F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:trace_analyzer_and_collector:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2021.8.0",
              "matchCriteriaId": "BA7E18CB-DCAF-4EA3-95BE-4FF68783E2C8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:intel:vtune_profiler:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2023.0",
              "matchCriteriaId": "B852D3CA-B710-4686-9414-5D0FDEF0C4B3"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html",
      "source": "secure@intel.com",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}