CVE-2023-22355 - Vulnerability Details

Vendors	Products
Intel	Advisor Cpu Runtime Distribution For Python Dpc\+\+ Compatibility Tool Embree Ray Tracing Kernel Library Fortran Compiler Implicit Spmd Program Compiler Inspector Integrated Performance Primitives Integrated Performance Primitives Cryptography Mpi Library Oneapi Base Toolkit Oneapi Data Analytics Library Oneapi Deep Neural Network Library Oneapi Dpc\+\+\/c\+\+ Compiler Oneapi Dpc\+\+ Library Oneapi Hpc Toolkit Oneapi Iot Toolkit Oneapi Math Kernel Library Oneapi Rendering Toolkit Oneapi Threading Building Blocks Oneapi Toolkit And Component Software Installers Oneapi Video Processing Library Open Image Denoise Open Volume Kernel Library Ospray Ospray Studio Trace Analyzer And Collector Vtune Profiler

Link	Providers
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-22355", "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "state": "PUBLISHED", "assignerShortName": "intel", "dateReserved": "2023-01-07T04:00:03.309Z", "datePublished": "2023-05-10T13:17:14.480Z", "dateUpdated": "2025-01-24T17:36:46.630Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel", "dateUpdated": "2023-05-10T13:17:14.480Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "escalation of privilege"}, {"lang": "en", "description": "Uncontrolled search path", "cweId": "CWE-427", "type": "CWE"}]}], "affected": [{"vendor": "n/a", "product": "Intel(R) oneAPI Toolkit and component software installers", "versions": [{"version": "before version 4.3.0.251", "status": "affected"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access."}], "references": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T10:07:06.156Z"}, "title": "CVE Program Container", "references": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-24T17:36:23.211884Z", "id": "CVE-2023-22355", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-24T17:36:46.630Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-22355 (string)

assignerOrgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

state : PUBLISHED (string)

assignerShortName : intel (string)

dateReserved : 2023-01-07T04:00:03.309Z (string)

datePublished : 2023-05-10T13:17:14.480Z (string)

dateUpdated : 2025-01-24T17:36:46.630Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

shortName : intel (string)

dateUpdated : 2023-05-10T13:17:14.480Z (string)

}

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : escalation of privilege (string)

}

1 : { »

lang : en (string)

description : Uncontrolled search path (string)

cweId : CWE-427 (string)

type : CWE (string)

}

]

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : Intel(R) oneAPI Toolkit and component software installers (string)

versions : [ »

0 : { »

version : before version 4.3.0.251 (string)

status : affected (string)

}

]

defaultStatus : unaffected (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access. (string)

}

]

references : [ »

0 : { »

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html (string)

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

cvssV3_1 : { »

version : 3.1 (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H (string)

attackVector : LOCAL (string)

attackComplexity : HIGH (string)

privilegesRequired : LOW (string)

userInteraction : REQUIRED (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

availabilityImpact : HIGH (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T10:07:06.156Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html (string)

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-01-24T17:36:23.211884Z (string)

id : CVE-2023-22355 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-01-24T17:36:46.630Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html", "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T10:07:06.156Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-22355", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-01-24T17:36:23.211884Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-24T17:36:17.371Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "n/a", "product": "Intel(R) oneAPI Toolkit and component software installers", "versions": [{"status": "affected", "version": "before version 4.3.0.251"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html", "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html"}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "escalation of privilege"}, {"lang": "en", "type": "CWE", "cweId": "CWE-427", "description": "Uncontrolled search path"}]}], "providerMetadata": {"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel", "dateUpdated": "2023-05-10T13:17:14.480Z"}}}, "cveMetadata": {"cveId": "CVE-2023-22355", "state": "PUBLISHED", "dateUpdated": "2025-01-24T17:36:46.630Z", "dateReserved": "2023-01-07T04:00:03.309Z", "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "datePublished": "2023-05-10T13:17:14.480Z", "assignerShortName": "intel"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html (string)

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T10:07:06.156Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-22355 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-01-24T17:36:23.211884Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-01-24T17:36:17.371Z (string)

}

]

cna : { »

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.7 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : REQUIRED (string)

attackComplexity : HIGH (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : Intel(R) oneAPI Toolkit and component software installers (string)

versions : [ »

0 : { »

status : affected (string)

version : before version 4.3.0.251 (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html (string)

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : escalation of privilege (string)

}

1 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-427 (string)

description : Uncontrolled search path (string)

}

]

}

]

providerMetadata : { »

orgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

shortName : intel (string)

dateUpdated : 2023-05-10T13:17:14.480Z (string)

}

cveMetadata : { »

cveId : CVE-2023-22355 (string)

state : PUBLISHED (string)

dateUpdated : 2025-01-24T17:36:46.630Z (string)

dateReserved : 2023-01-07T04:00:03.309Z (string)

assignerOrgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

datePublished : 2023-05-10T13:17:14.480Z (string)

assignerShortName : intel (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:intel:advisor:*:*:*:*:*:oneapi:*:*", "matchCriteriaId": "ACFF62CB-DC95-4A03-8886-E3DE682ECF45", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:cpu_runtime:*:*:*:*:*:opencl:*:*", "matchCriteriaId": "65B36180-4945-4A43-B2AD-B917C6FA052C", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:distribution_for_python:*:*:*:*:*:*:*:*", "matchCriteriaId": "1CF57C55-C87E-428C-9634-158AA00C4717", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:dpc\\+\\+_compatibility_tool:*:*:*:*:*:*:*:*", "matchCriteriaId": "EFA35C90-15A8-492A-82AA-EB90B5A64CC3", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:embree_ray_tracing_kernel_library:*:*:*:*:*:*:*:*", "matchCriteriaId": "2B39BDDD-5AED-4E02-A856-330F54E7660A", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:fortran_compiler:*:*:*:*:*:*:*:*", "matchCriteriaId": "0160EA22-BD65-4674-97A0-D10CE4171895", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:implicit_spmd_program_compiler:*:*:*:*:*:*:*:*", "matchCriteriaId": "3CC2A97B-1E5D-4076-BC33-2137275B80EB", "versionEndExcluding": "1.18.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:inspector:*:*:*:*:*:oneapi:*:*", "matchCriteriaId": "FDDBD13A-D43F-4855-912A-D1AD78C42B63", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:integrated_performance_primitives:*:*:*:*:*:*:*:*", "matchCriteriaId": "1200A0B0-FE28-424D-B225-5A9FBA381F59", "versionEndExcluding": "2021.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:integrated_performance_primitives_cryptography:*:*:*:*:*:*:*:*", "matchCriteriaId": "92634595-EBED-490B-8C5D-E0628B5671C1", "versionEndExcluding": "2021.6.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:mpi_library:*:*:*:*:*:*:*:*", "matchCriteriaId": "73AD7DE0-4634-4760-863D-705CEFF0D531", "versionEndExcluding": "2021.8", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_base_toolkit:*:*:*:*:*:*:*:*", "matchCriteriaId": "77F68C74-6AEB-4586-A9A1-2AA4CABC992D", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_data_analytics_library:*:*:*:*:*:*:*:*", "matchCriteriaId": "6DDFCC4E-E137-40BA-B6A3-9650D8FB9DA9", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_deep_neural_network_library:*:*:*:*:*:*:*:*", "matchCriteriaId": "12E76EDE-CA0D-4861-80EE-A7A860F2F6AE", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_dpc\\+\\+\\/c\\+\\+_compiler:*:*:*:*:*:*:*:*", "matchCriteriaId": "91F934F2-5D53-449D-8033-31C01BF99A1E", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_dpc\\+\\+_library:*:*:*:*:*:*:*:*", "matchCriteriaId": "DF697BE5-6DDE-40AD-853F-CA1C05638E1C", "versionEndExcluding": "2022.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_hpc_toolkit:*:*:*:*:*:*:*:*", "matchCriteriaId": "6728C973-7E1D-46EB-BE07-E572A09B5D96", "versionEndExcluding": "2023.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_hpc_toolkit:2023.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "D0726E01-A9D7-4D32-92C5-4D7673A7DDC3", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_iot_toolkit:*:*:*:*:*:*:*:*", "matchCriteriaId": "04049E09-EA46-4270-844A-722AD33E9305", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_math_kernel_library:*:*:*:*:*:*:*:*", "matchCriteriaId": "42A7BFFF-DEB1-42F4-984F-3462DEF40A41", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_rendering_toolkit:*:*:*:*:*:*:*:*", "matchCriteriaId": "9962AA12-66F5-4545-88FE-2EF3A671E904", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_threading_building_blocks:*:*:*:*:*:*:*:*", "matchCriteriaId": "85C9E5C6-95FA-4C62-B18A-13FAE13E3AD5", "versionEndExcluding": "2021.8", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_toolkit_and_component_software_installers:*:*:*:*:*:*:*:*", "matchCriteriaId": "850130A2-4C4D-4E0A-A5B6-62619B673290", "versionEndExcluding": "4.3.0.251", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:oneapi_video_processing_library:*:*:*:*:*:*:*:*", "matchCriteriaId": "06201FF4-6ED4-4E41-A356-738A4E5F8AEC", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:open_image_denoise:*:*:*:*:*:*:*:*", "matchCriteriaId": "65B820BD-07FB-48AC-B3E4-F3DCAB991C9B", "versionEndExcluding": "1.4.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:open_volume_kernel_library:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D7C18F6-10F1-49DC-93BC-C5A0A170F404", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:ospray:*:*:*:*:*:*:*:*", "matchCriteriaId": "0DA13265-18CF-46A0-89FE-2249E9DAF597", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:ospray_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "1BABB997-985A-4BAC-93CA-FB7CD0CE545F", "versionEndExcluding": "2023.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:trace_analyzer_and_collector:*:*:*:*:*:*:*:*", "matchCriteriaId": "BA7E18CB-DCAF-4EA3-95BE-4FF68783E2C8", "versionEndExcluding": "2021.8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:vtune_profiler:*:*:*:*:*:*:*:*", "matchCriteriaId": "B852D3CA-B710-4686-9414-5D0FDEF0C4B3", "versionEndExcluding": "2023.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access."}], "id": "CVE-2023-22355", "lastModified": "2024-11-21T07:44:37.140", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "secure@intel.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-05-10T14:15:27.240", "references": [{"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-427"}], "source": "secure@intel.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-427"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:intel:advisor:*:*:*:*:*:oneapi:*:* (string)

matchCriteriaId : ACFF62CB-DC95-4A03-8886-E3DE682ECF45 (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:intel:cpu_runtime:*:*:*:*:*:opencl:*:* (string)

matchCriteriaId : 65B36180-4945-4A43-B2AD-B917C6FA052C (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:intel:distribution_for_python:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 1CF57C55-C87E-428C-9634-158AA00C4717 (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:intel:dpc\+\+_compatibility_tool:*:*:*:*:*:*:*:* (string)

matchCriteriaId : EFA35C90-15A8-492A-82AA-EB90B5A64CC3 (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:intel:embree_ray_tracing_kernel_library:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 2B39BDDD-5AED-4E02-A856-330F54E7660A (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:intel:fortran_compiler:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0160EA22-BD65-4674-97A0-D10CE4171895 (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:intel:implicit_spmd_program_compiler:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3CC2A97B-1E5D-4076-BC33-2137275B80EB (string)

versionEndExcluding : 1.18.1 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:intel:inspector:*:*:*:*:*:oneapi:*:* (string)

matchCriteriaId : FDDBD13A-D43F-4855-912A-D1AD78C42B63 (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:intel:integrated_performance_primitives:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 1200A0B0-FE28-424D-B225-5A9FBA381F59 (string)

versionEndExcluding : 2021.7 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:intel:integrated_performance_primitives_cryptography:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 92634595-EBED-490B-8C5D-E0628B5671C1 (string)

versionEndExcluding : 2021.6.3 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:intel:mpi_library:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 73AD7DE0-4634-4760-863D-705CEFF0D531 (string)

versionEndExcluding : 2021.8 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:intel:oneapi_base_toolkit:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 77F68C74-6AEB-4586-A9A1-2AA4CABC992D (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:intel:oneapi_data_analytics_library:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6DDFCC4E-E137-40BA-B6A3-9650D8FB9DA9 (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:intel:oneapi_deep_neural_network_library:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 12E76EDE-CA0D-4861-80EE-A7A860F2F6AE (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:intel:oneapi_dpc\+\+\/c\+\+_compiler:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 91F934F2-5D53-449D-8033-31C01BF99A1E (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:intel:oneapi_dpc\+\+_library:*:*:*:*:*:*:*:* (string)

matchCriteriaId : DF697BE5-6DDE-40AD-853F-CA1C05638E1C (string)

versionEndExcluding : 2022.0 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:intel:oneapi_hpc_toolkit:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6728C973-7E1D-46EB-BE07-E572A09B5D96 (string)

versionEndExcluding : 2023.0.0 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:intel:oneapi_hpc_toolkit:2023.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : D0726E01-A9D7-4D32-92C5-4D7673A7DDC3 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:intel:oneapi_iot_toolkit:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 04049E09-EA46-4270-844A-722AD33E9305 (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:intel:oneapi_math_kernel_library:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 42A7BFFF-DEB1-42F4-984F-3462DEF40A41 (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:intel:oneapi_rendering_toolkit:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 9962AA12-66F5-4545-88FE-2EF3A671E904 (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:intel:oneapi_threading_building_blocks:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 85C9E5C6-95FA-4C62-B18A-13FAE13E3AD5 (string)

versionEndExcluding : 2021.8 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:intel:oneapi_toolkit_and_component_software_installers:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 850130A2-4C4D-4E0A-A5B6-62619B673290 (string)

versionEndExcluding : 4.3.0.251 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:intel:oneapi_video_processing_library:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 06201FF4-6ED4-4E41-A356-738A4E5F8AEC (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:intel:open_image_denoise:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 65B820BD-07FB-48AC-B3E4-F3DCAB991C9B (string)

versionEndExcluding : 1.4.3 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:intel:open_volume_kernel_library:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8D7C18F6-10F1-49DC-93BC-C5A0A170F404 (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:intel:ospray:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0DA13265-18CF-46A0-89FE-2249E9DAF597 (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:intel:ospray_studio:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 1BABB997-985A-4BAC-93CA-FB7CD0CE545F (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:intel:trace_analyzer_and_collector:*:*:*:*:*:*:*:* (string)

matchCriteriaId : BA7E18CB-DCAF-4EA3-95BE-4FF68783E2C8 (string)

versionEndExcluding : 2021.8.0 (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:intel:vtune_profiler:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B852D3CA-B710-4686-9414-5D0FDEF0C4B3 (string)

versionEndExcluding : 2023.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access. (string)

}

]

id : CVE-2023-22355 (string)

lastModified : 2024-11-21T07:44:37.140 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.8 (number)

impactScore : 5.9 (number)

source : secure@intel.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-05-10T14:15:27.240 (string)

references : [ »

0 : { »

source : secure@intel.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html (string)

}

]

sourceIdentifier : secure@intel.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-427 (string)

}

]

source : secure@intel.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-427 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object