CVEvulnerability

CVE-2023-35121

7.8 HIGH Published 2024-02-14 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-02-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-284

Description

Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

• intel advisor (< 2023.2) • intel cluster checker 2021.7.3 • intel distribution for python 2023.1 • intel inspector (< 2023.2) • intel integrated performance primitives 2021.9 • intel integrated performance primitives cryptography (< 2021.8) • intel mpi library (< 2021.10) • intel oneapi ai analytics toolkit 2023.2 • intel oneapi base toolkit (< 2023.2) • intel oneapi base toolkit 2023.2 • intel oneapi deep neural network (< 2023.2) • intel oneapi deep neural network 2023.2 • intel oneapi hpc toolkit 2023.2 • intel oneapi iot toolkit 2023.2 • intel oneapi math kernel library (< 2023.2) • intel threading building blocks (< 2021.10) • intel trace analyzer and collector 2021.10.0 • intel vtune profiler (< 2023.2)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References