CVE-2019-14613

CWE-269 — Improper Privilege Management3 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 81.99%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Vtune Profiler Intel Intel(r) Vtune(tm) Amplifier FOR Windows*

Timeline

PublishedJan 17

Latest updateMay 24

Description

Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5intel/intel(r)_vtune(tm)_amplifier_for_windows*before update 8

▶NVDintel/vtune_profiler< 2019+1

🔴Vulnerability Details

GHSA

GHSA-x4c3-wmc6-2mx9: Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8 may allow an authenticated user to potentially enable↗2022-05-24

▶

CVEList

CVE-2019-14613: Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8 may allow an authenticated user to potentially enable↗2020-01-17

▶