Lucene search
HistoryAug 11, 2023 - 3:15 a.m.
CVE-2022-25864
intel software
uncontrolled search path
privilege escalation
cve-2022-25864
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Uncontrolled search path in some Intel® oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
Node
inteloneapi_math_kernel_libraryRange<2022.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intel | oneapi_math_kernel_library | * | cpe:2.3:a:intel:oneapi_math_kernel_library:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-25864
2023-08-11 03:15:10
cvelist
cvelist
CVE-2022-25864
2023-08-11 02:37:14
prion
prion
Design/Logic Flaw
2023-08-11 03:15:00
intel
intel
Intel® oneMKL Software Advisory
2023-08-08 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2022-25864