CVEvulnerability
CVE-2023-27391
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-08-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-284
Description
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.
Affected configurations
• intel advisor for oneapi (< 2023.1)
• intel cpu runtime for opencl applications (< 2023.1)
• intel distribution for python programming language (< 2023.1)
• intel dpc\+\+ compatibility tool (< 2023.1)
• intel embree ray tracing kernel library (< 2023.1)
• intel fortran compiler (< 2023.1)
• intel implicit spmd program compiler (< 1.19.1)
• intel inspector for oneapi (< 2023.1)
• intel integrated performance primitives (< 2021.8)
• intel ipp cryptography (< 2021.7.0)
• intel mpi library (< 2021.9.0)
• intel oneapi base toolkit (< 2023.1)
• intel oneapi data analytics library (< 2023.1)
• intel oneapi deep neural network library (< 2023.1)
• intel oneapi dpc\+\+\/c\+\+ compiler (< 2023.1)
• intel oneapi dpc\+\+ library \(onedpl\) (< 2022.1)
• intel oneapi hpc toolkit (< 2023.1)
• intel oneapi iot toolkit (< 2023.1)
• intel oneapi math kernel library (< 2023.1)
• intel oneapi rendering toolkit (< 2023.1)
• intel oneapi threading building blocks (< 2021.9.0)
• intel oneapi toolkit and component software installer (< 4.3.1.493)
• intel oneapi video processing library (< 2023.1)
• intel open image denoise (< 1.4.3)
• intel open volume kernel library (< 2023.1)
• intel ospray (< 2023.1)
• intel ospray studio (< 2023.1)
• intel trace analyzer and collector (< 2021.9.0)
• intel vtune profiler for oneapi (< 2023.1)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness