Uncontrolled Search Path Vulnerability in Intel Trace Analyzer and Collector Software
CVE-2025-20048

5.4MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Trace Analyzer And Collector Software
Vendor
CVE Published:
12 August 2025

What is CVE-2025-20048?

The vulnerability in Intel(R) Trace Analyzer and Collector allows an authenticated user to exploit an uncontrolled search path. This can potentially lead to privilege escalation through local access, posing a risk to system integrity. Users of the software should apply recommended mitigations and updates to safeguard their systems from possible exploitation.

Affected Version(s)

Intel(R) Trace Analyzer and Collector software See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-20048 : Uncontrolled Search Path Vulnerability in Intel Trace Analyzer and Collector Software