VulnerabilityModified
CVE-2023-27391
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.
MEDIUM 6.7EPSS 0.18%
Does this matter?
Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own.
Description
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.18% probability · 8th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- intel/advisor for oneapi · intel/cpu runtime for opencl applications · intel/distribution for python programming language · intel/dpc\+\+ compatibility tool · intel/embree ray tracing kernel library · intel/fortran compiler · intel/implicit spmd program compiler · intel/inspector for oneapi · intel/integrated performance primitives · intel/ipp cryptography · intel/mpi library · intel/oneapi base toolkit · intel/oneapi data analytics library · intel/oneapi deep neural network library · intel/oneapi dpc\+\+\/c\+\+ compiler · intel/oneapi dpc\+\+ library \(onedpl\) · intel/oneapi hpc toolkit · intel/oneapi iot toolkit · intel/oneapi math kernel library · intel/oneapi rendering toolkit · +9 more
- Source
- secure@intel.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.