CVE-2024-28172

Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Score

CVSS 3.1 7.3 High

Status

Analyzed - secure@intel.com

Published

2024-08-14

Last modified

2024-08-15

Weaknesses

CWE-427

Affected products

• Oneapi Hpc Toolkit (Intel)
• Trace Analyzer And Collector (Intel)

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01117.html