Skip to main content

Trace Analyzer And Collector CVE-2024-28172

MEDIUM
Uncontrolled Search Path Element (CWE-427)
2024-08-14 secure@intel.com
Privilege Escalation Intel Trace Analyzer And Collector Oneapi Hpc Toolkit
5.4
CVSS 4.0 · Vendor: intel
Share

Severity by source

Vendor (intel) PRIMARY
5.4 MEDIUM
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (intel) · only source for this CVE.

CVSS VectorVendor: intel

Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
A
Scope
X

Lifecycle Timeline

1
CVE Published
Aug 14, 2024 - 14:15 cve.org
MEDIUM 5.4

DescriptionCVE.org

Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

AnalysisAI

Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated medium severity (CVSS 5.4). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-427. Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Affected products include: Intel Oneapi Hpc Toolkit, Intel Trace Analyzer And Collector. Version information: version 2022.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Trace Analyzer And Collector

View all
CVE-2023-31197 HIGH
7.8 May 12

Uncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update 3 may allow an authenti
CVE-2023-23910 HIGH
7.8 May 10

Out-of-bounds write for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 m
CVE-2023-23580 HIGH
7.8 May 10

Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published De
CVE-2023-23569 HIGH
7.8 May 10

Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published De
CVE-2023-22355 HIGH
7.8 May 10

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may

CVE-2017-5682 HIGH
7.3 Feb 28

Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel In
CVE-2023-28823 HIGH
7.3 Aug 11

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may

CVE-2023-27391 MEDIUM
6.7 Aug 11

Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may a
CVE-2023-23909 MEDIUM
5.5 May 10

Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 ma

Same weakness CWE-427 – Uncontrolled Search Path Element

View all
CVE-2020-3153 MEDIUM POC
6.5
CVE-2020-3433 HIGH POC
7.8
CVE-2017-6517 CRITICAL POC
9.8
CVE-2020-27955 CRITICAL POC
9.8
CVE-2024-48990 HIGH POC
7.8
CVE-2022-2334 HIGH POC
7.2
CVE-2024-23054 CRITICAL POC
9.8
CVE-2023-31543 CRITICAL POC
9.8

Same technique Privilege Escalation

View all
CVE-2024-0012 CRITICAL POC
9.3
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2024-9474 MEDIUM POC
6.9
CVE-2017-5689 CRITICAL POC
9.8
CVE-2021-20021 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8

Share

CVE-2024-28172 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy