CVE-2018-18093

Published: Dec 14, 2018Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gain privileged access via local access.

Affected (4)

Products: Intel: Vtune Amplifier

Intel

1 product

Vtune Amplifier

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Intel Vtune Amplifier	Up to 2018
Intel Vtune Amplifier	Version 2018 update1
Intel Vtune Amplifier	Version 2018 update2
Intel Vtune Amplifier	Version 2018 update3

Related CWEs

CWE-732

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00194.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00194.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.