CVEvulnerability

CVE-2023-27391

6.7 MEDIUM Published 2023-08-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284

Description

Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

• intel advisor for oneapi (< 2023.1) • intel cpu runtime for opencl applications (< 2023.1) • intel distribution for python programming language (< 2023.1) • intel dpc\+\+ compatibility tool (< 2023.1) • intel embree ray tracing kernel library (< 2023.1) • intel fortran compiler (< 2023.1) • intel implicit spmd program compiler (< 1.19.1) • intel inspector for oneapi (< 2023.1) • intel integrated performance primitives (< 2021.8) • intel ipp cryptography (< 2021.7.0) • intel mpi library (< 2021.9.0) • intel oneapi base toolkit (< 2023.1) • intel oneapi data analytics library (< 2023.1) • intel oneapi deep neural network library (< 2023.1) • intel oneapi dpc\+\+\/c\+\+ compiler (< 2023.1) • intel oneapi dpc\+\+ library \(onedpl\) (< 2022.1) • intel oneapi hpc toolkit (< 2023.1) • intel oneapi iot toolkit (< 2023.1) • intel oneapi math kernel library (< 2023.1) • intel oneapi rendering toolkit (< 2023.1) • intel oneapi threading building blocks (< 2021.9.0) • intel oneapi toolkit and component software installer (< 4.3.1.493) • intel oneapi video processing library (< 2023.1) • intel open image denoise (< 1.4.3) • intel open volume kernel library (< 2023.1) • intel ospray (< 2023.1) • intel ospray studio (< 2023.1) • intel trace analyzer and collector (< 2021.9.0) • intel vtune profiler for oneapi (< 2023.1)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References