CVE-2024-39284: 
Intel oneAPI Base Toolkit vulnerability analysis and mitigation

A security vulnerability has been identified in Intel(R) Advisor software versions prior to 2024.2. The vulnerability, tracked as CVE-2024-39284, involves an uncontrolled search path element that could potentially lead to privilege escalation. The issue was disclosed on February 12, 2025 (NVD).

The vulnerability is classified as CWE-427 (Uncontrolled Search Path Element). It has received a CVSS v3.1 base score of 6.7 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H. Under CVSS v4.0, it was assigned a score of 5.4 (MEDIUM) with the vector string CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N (NVD).

The vulnerability could potentially enable escalation of privilege when exploited through local access. The high severity ratings for confidentiality, integrity, and availability (C:H/I:H/A:H) indicate significant potential impact if successfully exploited (NVD).

The vulnerability requires local access and an authenticated user with low privileges to exploit. The attack complexity is rated as high (AC:H), and user interaction is required (UI:R), which somewhat mitigates the ease of exploitation (NVD).

Intel has addressed this vulnerability in version 2024.2 of the Intel(R) Advisor software. Users are advised to upgrade to this version or later to mitigate the security risk (NVD).