CVE-2024-37025 in Advanced Link Analyzer Standard Edition Software

Riassunto

di MITRE • 13/11/2024

Incorrect execution-assigned permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: Intel
• Prenotare: 15/06/2024
• Divulgazione: 13/11/2024
• Moderazione: accettato
• Voce: VDB-284461
• CPE: pronto
• CWE: CWE-279 (confermato)
• CVSS: 6.7 (CNA)
• EPSS: 0.00150
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-37025
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-37025
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-37025/