CVE-2023-28405 in Distribution of OpenVINO Toolkit

Résumé

par MITRE • 11/08/2023

Uncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2022.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Intel Corporation
• Réserver: 01/04/2023
• Divulgation: 11/08/2023
• Modérer: accepté
• Entrée: VDB-236880
• CPE: prêt
• CWE: CWE-427 (confirmé)
• CVSS: 7.8 (NVD)
• EPSS: 0.00157
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-28405
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-28405
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-28405/