CVE-2023-31246

Опубликовано: 11 авг. 2023

Источник: nvd

CVSS3: 6.7

CVSS3: 7.8

EPSS Низкий

Описание

Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access.

Ссылки

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00905.html
Patch
Vendor Advisory
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00905.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:intel:server_debug_and_provisioning_tool:*:*:*:*:*:*:*:*

Версия до 1.4 (исключая)

cpe:2.3:a:intel:server_debug_and_provisioning_tool:1.4:build_2:*:*:*:*:*:*

cpe:2.3:a:intel:server_debug_and_provisioning_tool:1.4:build_3:*:*:*:*:*:*

cpe:2.3:a:intel:server_debug_and_provisioning_tool:1.4:build_4:*:*:*:*:*:*

EPSS

Процентиль: 19%

0.00061

Низкий

6.7 Medium

CVSS3

7.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

GHSA-5h24-ffph-2wq7

CVSS3: 6.7

github

больше 2 лет назад

Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access.

EPSS

Процентиль: 19%

0.00061

Низкий

6.7 Medium

CVSS3

7.8 High

CVSS3

Дефекты

CWE-276