Uncontrolled Search Path Vulnerability in Intel oneMKL Software
CVE-2022-25864

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Onemkl Software
Vendor
CVE Published:
11 August 2023

What is CVE-2022-25864?

The vulnerability in Intel oneMKL software, specifically in versions prior to 2022.0, is characterized by an uncontrolled search path issue. This flaw allows an authenticated user to potentially escalate privileges through local access. As a result, it poses a significant risk to system integrity if left unaddressed. Organizations using affected versions are urged to promptly apply the latest updates to safeguard against this vulnerability.

Affected Version(s)

Intel(R) oneMKL software before version 2022.0

References

http://www.intel.com/content/www/us/en/security-center/ad...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.