NetSight
medium6.7

CVE-2023-22355

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentia…

Impact

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffected versions
IntelAdvisor
before 2023.0
IntelCpu Runtime
before 2023.0
IntelDistribution For Python
before 2023.0
IntelDpc\+\+ Compatibility Tool
before 2023.0
IntelEmbree Ray Tracing Kernel Library
before 2023.0
IntelFortran Compiler
before 2023.0
IntelImplicit Spmd Program Compiler
before 1.18.1
IntelInspector
before 2023.0
IntelIntegrated Performance Primitives
before 2021.7
IntelIntegrated Performance Primitives Cryptography
before 2021.6.3
IntelMpi Library
before 2021.8
IntelOneapi Base Toolkit
before 2023.0

Weakness classification

References