Skip to main content

Oneapi Base Toolkit CVE-2023-27391

MEDIUM
Improper Access Control (CWE-284)
2023-08-11 secure@intel.com
Authentication Bypass Privilege Escalation Intel Oneapi Base Toolkit Integrated Performance Primitives Mpi Library Trace Analyzer And Collector Oneapi Rendering Toolkit Oneapi Dpc C Compiler Oneapi Data Analytics Library Oneapi Hpc Toolkit Dpc Compatibility Tool Embree Ray Tracing Kernel Library Fortran Compiler Implicit Spmd Program Compiler Oneapi Deep Neural Network Library Oneapi Iot Toolkit Oneapi Math Kernel Library Oneapi Threading Building Blocks Oneapi Video Processing Library Open Image Denoise Open Volume Kernel Library Ospray Ospray Studio Advisor For Oneapi Cpu Runtime For Opencl Applications Distribution For Python Programming Language Inspector For Oneapi Ipp Cryptography Oneapi Dpc Library Onedpl Oneapi Toolkit And Component Software Installer Vtune Profiler For Oneapi
6.7
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.7 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Aug 11, 2023 - 03:15 nvd
MEDIUM 6.7

DescriptionNVD

Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.

AnalysisAI

Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-284. Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access. Affected products include: Intel Advisor For Oneapi, Intel Cpu Runtime For Opencl Applications, Intel Distribution For Python Programming Language, Intel Dpc\+\+ Compatibility Tool, Intel Embree Ray Tracing Kernel Library. Version information: version 4.3.1.493.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Oneapi Base Toolkit

View all
CVE-2024-21772 HIGH
7.8 May 16

Uncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to pote
CVE-2023-24592 HIGH
7.8 Nov 14

Path traversal in the some Intel(R) oneAPI Toolkits and Component software before version 2023.1 may allow authenticated
CVE-2023-29242 HIGH
7.8 May 12

Improper access control for Intel(R) oneAPI Toolkits before version 2021.1 Beta 10 may allow an authenticated user to po
CVE-2023-22355 HIGH
7.8 May 10

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may

CVE-2023-28823 HIGH
7.3 Aug 11

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may

CVE-2023-27383 MEDIUM
6.8 Nov 14

Protection mechanism failure in some Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library software before version

CVE-2023-30763 MEDIUM
6.7 May 12

Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentiall
CVE-2024-25562 MEDIUM
5.8 Aug 14

Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authent
CVE-2024-39284 MEDIUM
5.4 Feb 12

Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to pot
CVE-2025-20079 MEDIUM
5.4 May 13

Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escala
CVE-2024-36245 MEDIUM
5.4 Nov 13

Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authe
CVE-2024-28952 MEDIUM
5.4 Nov 13

Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated

Same weakness CWE-284 – Improper Access Control

View all
CVE-2012-4681 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2012-5076 CRITICAL POC
9.8
CVE-2014-3120 HIGH POC
8.1
CVE-2013-2423 LOW POC
3.7
CVE-2016-3427 CRITICAL
9.8
CVE-2025-12480 CRITICAL POC
9.1

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2023-27391 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy