Uncontrolled Search Path Vulnerability in Intel DSA Software
CVE-2021-0090

7.3HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Dsa
Vendor
CVE Published:
9 June 2021

What is CVE-2021-0090?

The vulnerability involves an uncontrolled search path element in Intel(R) DSA, which, prior to version 20.11.50.9, could permit an authenticated user with local access to exploit the flaw, potentially allowing for escalation of privileges. This misconfiguration can expose systems to risks if not addressed promptly, emphasizing the importance of maintaining software updates and adhering to security best practices.

Affected Version(s)

Intel(R) DSA before version 20.11.50.9

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2021-0090 : Uncontrolled Search Path Vulnerability in Intel DSA Software