CVE-2023-27391

CWE-284 — Improper Access Control3 documents3 sources
Severity
6.7MEDIUM
EPSS
0.0%
top 86.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
29
Intel Advisor FOR OneapiIntel CPU Runtime FOR Opencl ApplicationsIntel Distribution FOR Python Programming Language+26 more
Timeline
PublishedAug 11

Description

Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages30 packages

🔴Vulnerability Details

2
GHSA
GHSA-vcwv-3m76-7vfq: Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4↗2023-08-11
▶
CVEList
CVE-2023-27391: Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4↗2023-08-11
▶
CVE-2023-27391 (MEDIUM CVSS 6.7) | Improper access control in some Int | cvebase.io