CVE-2022-33892 — Path Traversal in Intel Quartus Prime

CWE-22 — Path Traversal3 documents3 sources
Severity
7.8HIGHNVD
CNA7.3
EPSS
0.0%
top 85.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Intel Quartus Prime
Timeline
PublishedFeb 16

Description

Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶NVDintel/quartus_prime< 22.1+1

🔴Vulnerability Details

2
GHSA
GHSA-jx8m-g766-r6m8: Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of pri↗2023-02-16
▶
CVEList
CVE-2022-33892: Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of pri↗2023-02-16
▶
CVE-2022-33892 — Path Traversal in Intel Quartus Prime | cvebase