Insecure Permissions in Intel VTune Profiler Software
CVE-2022-41658

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Vtune(tm) Profiler Software
Vendor
CVE Published:
10 May 2023

What is CVE-2022-41658?

The Intel VTune Profiler software includes insecure inherited permissions that can allow an authenticated user to escalate privileges through local access. This vulnerability affects versions of the software prior to 2023.0, raising concerns over unauthorized access to features and data within the application. Users of the affected versions should apply the latest updates to mitigate the risk associated with this vulnerability.

Affected Version(s)

Intel(R) VTune(TM) Profiler software before version 2023.0

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.