Uncontrolled Search Path Vulnerability in Intel Trace Analyzer and Collector
CVE-2023-31197

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Trace Analyzer And Collector
Vendor
CVE Published:
12 May 2023

What is CVE-2023-31197?

An uncontrolled search path security flaw in the Intel Trace Analyzer and Collector prior to the 2020 update 3 allows an authenticated user to exploit local access, potentially leading to unauthorized privilege escalation. This vulnerability underscores the importance of validating input paths within software applications to prevent potential exploits.

Affected Version(s)

Intel(R) Trace Analyzer and Collector before version 2020 update 3

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.