Lucene search
HistoryAug 18, 2022 - 8:15 p.m.
CVE-2022-28696
intel distribution python
uncontrolled search path
privilege escalation
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
12.6%
Uncontrolled search path in the Intel® Distribution for Python before version 2022.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
Node
inteldistribution_for_pythonRange<2022.0.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intel | distribution_for_python | * | cpe:2.3:a:intel:distribution_for_python:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2022-08-18 20:15:00
cvelist
cvelist
CVE-2022-28696
2022-08-18 19:57:53
cve
cve
CVE-2022-28696
2022-08-18 20:15:11
intel
intel
Intel® Distribution for Python Advisory
2022-08-09 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
12.6%
Related for NVD:CVE-2022-28696