Potential Escalation of Privilege Vulnerability in Intel GPA Framework Software Installers
CVE-2023-43748
7.8HIGH
Key Information:
- Vendor
- Intel
- Vendor
- CVE Published:
- 16 May 2024
Summary
An improper access control vulnerability exists in the Intel GPA Framework software installers that may allow an authenticated user to enable privilege escalation through local access. This issue affects installations prior to version 2023.3, potentially exposing systems to risks by permitting elevated permissions that should not be accessible to regular users. This type of vulnerability emphasizes the importance of stringent access controls within software deployment processes to mitigate unauthorized actions.
Affected Version(s)
Intel(R) GPA Framework software installers before version 2023.3
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved