
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2023-28823 is a security vulnerability affecting Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493. The vulnerability was discovered and reported by @j00sean and was publicly disclosed in August 2023 (Intel Advisory).
The vulnerability is classified as an uncontrolled search path element (CWE-427) that affects various Intel oneAPI components. It has received a CVSS v3.1 Base Score of 7.3 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H according to NVD's assessment (NVD).
If exploited, this vulnerability could allow an authenticated user to potentially enable escalation of privilege via local access. The vulnerability affects multiple Intel oneAPI components including the Toolkit and various software installers (Intel Advisory).
The vulnerability requires local access and can only be exploited by an authenticated user with specific privileges. The attack complexity is considered low, but requires user interaction for successful exploitation (NVD).
Intel has addressed this vulnerability by releasing version 4.3.1.493 of the oneAPI Toolkit and component software installers. Users are advised to update to this version or later to mitigate the vulnerability (Intel Advisory).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."