Описание
Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable escalation of privilege via local access.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 21.1 (включая)
cpe:2.3:a:intel:quartus_prime:*:*:*:*:standard:*:*:*
EPSS
Процентиль: 27%
0.00096
Низкий
6.7 Medium
CVSS3
7.8 High
CVSS3
Дефекты
CWE-427
CWE-427
Связанные уязвимости
CVSS3: 7.8
github
почти 3 года назад
Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable escalation of privilege via local access.
EPSS
Процентиль: 27%
0.00096
Низкий
6.7 Medium
CVSS3
7.8 High
CVSS3
Дефекты
CWE-427
CWE-427