NetSight
medium6.7

CVE-2023-28823

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentia…

Impact

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffected versions
IntelAdvisor For Oneapi
before 2023.1
IntelCpu Runtime For Opencl Applications
before 2023.1
IntelDistribution For Python Programming Language
before 2023.1
IntelDpc\+\+ Compatibility Tool
before 2023.1
IntelEmbree Ray Tracing Kernel Library
before 2023.1
IntelFortran Compiler
before 2023.1
IntelImplicit Spmd Program Compiler
before 1.19.1
IntelInspector For Oneapi
before 2023.1
IntelIntegrated Performance Primitives
before 2021.8
IntelIpp Cryptography
before 2021.7.0
IntelMpi Library
before 2021.9.0
IntelOneapi Base Toolkit
before 2023.1

Weakness classification

References