CVE-2023-41091: 
Intel MPI Library vulnerability analysis and mitigation

CVE-2023-41091 affects Intel(R) MPI Library Software versions before 2021.11. The vulnerability was disclosed on February 14, 2024, and involves an uncontrolled search path element that could potentially enable privilege escalation. The vulnerability specifically impacts authenticated users who have local access to systems running the affected versions of Intel MPI Library Software (Intel Advisory).

The vulnerability is classified as an Uncontrolled Search Path Element (CWE-427) issue. It has received a CVSS v3.1 base score of 7.8 (HIGH) from NIST with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, while Intel Corporation assessed it with a score of 6.7 (MEDIUM) and vector string CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H (NVD).

If exploited, this vulnerability could allow an authenticated user with local access to escalate their privileges on the affected system. The high CVSS scores indicate potential severe impacts on system confidentiality, integrity, and availability (Intel Advisory).

The vulnerability requires local access and authenticated user status to exploit. The differing CVSS scores from NIST and Intel suggest varying assessments of the attack complexity and user interaction requirements, with Intel's assessment indicating higher complexity and required user interaction (NVD).

Users should upgrade to Intel(R) MPI Library Software version 2021.11 or later to address this vulnerability (Intel Advisory).