Uncontrolled Search Path Vulnerability in Intel Trace Analyzer and Collector Software
CVE-2024-28172

7.3HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Trace Analyzer And Collector Software
Vendor
CVE Published:
14 August 2024

What is CVE-2024-28172?

The vulnerability in Intel Trace Analyzer and Collector software prior to version 2022.1 arises from an uncontrolled search path which can allow authenticated users to exploit local access. This flaw has the potential to enable privilege escalation, posing risks to system integrity and data security. Configurations and security practices should be reviewed to mitigate risks associated with this vulnerability.

Affected Version(s)

Intel(R) Trace Analyzer and Collector software before version 2022.1

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.