CVE-2018-12175

CWE-276 — Incorrect Default Permissions4 documents4 sources
Severity
7.8HIGH
EPSS
0.0%
top 88.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Intel Corporation Intel(r) Distribution FOR Python 2018Intel Distribution FOR Python
Timeline
PublishedSep 12
Latest updateMay 13

Description

Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privileges via local access.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

â–¶CVEListV5intel_corporation/intel(r)_distribution_for_python_2018Intel(R) Distribution for Python 2018 downloaded before Aug 6, 2018.
â–¶NVDintel/distribution2018

🔴Vulnerability Details

2
GHSA
GHSA-r5r7-m3gc-3qc5: Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privileges via lo↗2022-05-13
â–¶
CVEList
CVE-2018-12175: Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privileges via lo↗2018-09-12
â–¶

💬Community

1
Bugzilla
CVE-2017-12175 Satellite 6: XSS in discovery rule filter autocomplete functionality↗2017-10-05
â–¶