Vulnerability in Intel Advisor_for_oneapi
CVE-2023-27391
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.
EPSS: 0.002 (6.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Intel Advisor_for_oneapi
- Intel Cpu_runtime_for_opencl_applications
- Intel Distribution_for_python_programming_language
- Intel Dpc\+\+_compatibility_tool
- Intel Embree_ray_tracing_kernel_library
- Intel Fortran_compiler
- Intel Implicit_spmd_program_compiler
- Intel Inspector_for_oneapi
- Intel Integrated_performance_primitives
- Intel Ipp_cryptography
Weakness classification (CWE)
References
- secure@intel.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-27391?
- CVE-2023-27391 is a medium-severity vulnerability in Intel Advisor_for_oneapi, classified under Improper Access Control. CVSS score: 6.7/10. Published 2023-08-11.
- How severe is CVE-2023-27391?
- Medium severity. CVSS v3 base score is 6.7 out of 10.