NetSight
medium6.7

CVE-2024-36245

Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable esc…

Impact

Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

VendorProductAffected versions
IntelOneapi Base Toolkit
before 2024.2
IntelSystem Bring-Up Toolkit
before 2024.2.0
IntelVtune Profiler
before 2024.2

Weakness classification

References