{ "id": "CVE-2023-22355", "sourceIdentifier": "secure@intel.com", "published": "2023-05-10T14:15:27.240", "lastModified": "2024-11-21T07:44:37.140", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access." } ], "metrics": { "cvssMetricV31": [ { "source": "secure@intel.com", "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "baseScore": 6.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, "exploitabilityScore": 0.8, "impactScore": 5.9 }, { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, "exploitabilityScore": 1.8, "impactScore": 5.9 } ] }, "weaknesses": [ { "source": "secure@intel.com", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-427" } ] }, { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-427" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:intel:advisor:*:*:*:*:*:oneapi:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "ACFF62CB-DC95-4A03-8886-E3DE682ECF45" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:cpu_runtime:*:*:*:*:*:opencl:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "65B36180-4945-4A43-B2AD-B917C6FA052C" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:distribution_for_python:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "1CF57C55-C87E-428C-9634-158AA00C4717" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:dpc\\+\\+_compatibility_tool:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "EFA35C90-15A8-492A-82AA-EB90B5A64CC3" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:embree_ray_tracing_kernel_library:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "2B39BDDD-5AED-4E02-A856-330F54E7660A" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:fortran_compiler:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "0160EA22-BD65-4674-97A0-D10CE4171895" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:implicit_spmd_program_compiler:*:*:*:*:*:*:*:*", "versionEndExcluding": "1.18.1", "matchCriteriaId": "3CC2A97B-1E5D-4076-BC33-2137275B80EB" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:inspector:*:*:*:*:*:oneapi:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "FDDBD13A-D43F-4855-912A-D1AD78C42B63" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:integrated_performance_primitives:*:*:*:*:*:*:*:*", "versionEndExcluding": "2021.7", "matchCriteriaId": "1200A0B0-FE28-424D-B225-5A9FBA381F59" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:integrated_performance_primitives_cryptography:*:*:*:*:*:*:*:*", "versionEndExcluding": "2021.6.3", "matchCriteriaId": "92634595-EBED-490B-8C5D-E0628B5671C1" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:mpi_library:*:*:*:*:*:*:*:*", "versionEndExcluding": "2021.8", "matchCriteriaId": "73AD7DE0-4634-4760-863D-705CEFF0D531" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_base_toolkit:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "77F68C74-6AEB-4586-A9A1-2AA4CABC992D" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_data_analytics_library:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "6DDFCC4E-E137-40BA-B6A3-9650D8FB9DA9" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_deep_neural_network_library:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "12E76EDE-CA0D-4861-80EE-A7A860F2F6AE" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_dpc\\+\\+\\/c\\+\\+_compiler:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "91F934F2-5D53-449D-8033-31C01BF99A1E" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_dpc\\+\\+_library:*:*:*:*:*:*:*:*", "versionEndExcluding": "2022.0", "matchCriteriaId": "DF697BE5-6DDE-40AD-853F-CA1C05638E1C" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_hpc_toolkit:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0.0", "matchCriteriaId": "6728C973-7E1D-46EB-BE07-E572A09B5D96" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_hpc_toolkit:2023.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "D0726E01-A9D7-4D32-92C5-4D7673A7DDC3" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_iot_toolkit:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "04049E09-EA46-4270-844A-722AD33E9305" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_math_kernel_library:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "42A7BFFF-DEB1-42F4-984F-3462DEF40A41" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_rendering_toolkit:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "9962AA12-66F5-4545-88FE-2EF3A671E904" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_threading_building_blocks:*:*:*:*:*:*:*:*", "versionEndExcluding": "2021.8", "matchCriteriaId": "85C9E5C6-95FA-4C62-B18A-13FAE13E3AD5" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_toolkit_and_component_software_installers:*:*:*:*:*:*:*:*", "versionEndExcluding": "4.3.0.251", "matchCriteriaId": "850130A2-4C4D-4E0A-A5B6-62619B673290" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:oneapi_video_processing_library:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "06201FF4-6ED4-4E41-A356-738A4E5F8AEC" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:open_image_denoise:*:*:*:*:*:*:*:*", "versionEndExcluding": "1.4.3", "matchCriteriaId": "65B820BD-07FB-48AC-B3E4-F3DCAB991C9B" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:open_volume_kernel_library:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "8D7C18F6-10F1-49DC-93BC-C5A0A170F404" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:ospray:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "0DA13265-18CF-46A0-89FE-2249E9DAF597" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:ospray_studio:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "1BABB997-985A-4BAC-93CA-FB7CD0CE545F" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:trace_analyzer_and_collector:*:*:*:*:*:*:*:*", "versionEndExcluding": "2021.8.0", "matchCriteriaId": "BA7E18CB-DCAF-4EA3-95BE-4FF68783E2C8" }, { "vulnerable": true, "criteria": "cpe:2.3:a:intel:vtune_profiler:*:*:*:*:*:*:*:*", "versionEndExcluding": "2023.0", "matchCriteriaId": "B852D3CA-B710-4686-9414-5D0FDEF0C4B3" } ] } ] } ], "references": [ { "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html", "source": "secure@intel.com", "tags": [ "Vendor Advisory" ] }, { "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ] } ] }