Mohamed Amine Saidani

**Name of the Vulnerable Software and Affected Versions** auth0-PHP versions 3.3.0 through 8.16.0 **Description** The Bulk User Import endpoint does not validate file path wrappers or values, potentially allowing acceptance of arbitrary file paths or URLs. This affects applications directly using the Auth0-PHP SDK versions 3.3.0 through 8.16.0, as well as applications relying on Auth0/symfony, Auth0/laravel-auth0, or Auth0/wordpress SDKs that utilize the affected Auth0-PHP SDK versions. The issue stems from a lack of proper validation when processing file paths. The vulnerable endpoint is the Bulk User Import endpoint. **Recommendations** Upgrade Auth0-PHP to version 8.17.0 or greater.

Name of the Vulnerable Software and Affected Versions: Intel SDP Tool for Windows (affected versions not specified) Description: The issue is related to an uncontrolled search path in the Intel SDP Tool for Windows software. This may allow an authenticated user to potentially enable escalation of privilege via local access. The vulnerability can be exploited by an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Intel(R) SDP Tool for Windows (affected versions not specified) Description: The issue is related to incorrect default permissions in the Intel(R) SDP Tool for Windows software, which may allow an authenticated user to enable escalation of privilege via local access. This is due to insufficient access restrictions. The exploitation of this issue can allow an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AMD Management Console (affected versions not specified) **Description** The issue is related to incorrect default permissions in the AMD Management Console installation directory, which could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EMON versions prior to 11.44 **Description** The issue is related to an uncontrolled search path in some EMON software, which may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 11.44, update to version 11.44 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** AMD μProf (affected versions not specified) **Description** The issue is related to incorrect default permissions in the AMD μProf installation directory, which could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AMD μProf (affected versions not specified) **Description** A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intel Connectivity Performance Suite versions prior to 2.0 **Description** The issue is related to incorrect default permissions in the Intel Connectivity Performance Suite software installer. This could allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 2.0, update the software to version 2.0 or later to mitigate the risk of privilege escalation. As a temporary workaround, consider restricting local access to the installer until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Ethernet Adapter Driver Pack versions prior to 28.3 **Description** The issue is related to an uncontrolled search path element in the installation software for Intel(R) Ethernet Adapter Driver Pack. This may allow an authenticated user to potentially enable escalation of privilege via local access. The exploitation of this issue could permit an attacker to elevate their privileges. **Recommendations** For versions prior to 28.3, update to version 28.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) CST software versions prior to 2.1.10300 **Description** The issue is related to an uncontrolled search path in some Intel(R) CST software, which may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 2.1.10300, update to version 2.1.10300 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) GPA Framework software versions prior to 2023.3 **Description** The issue is related to improper access control in some Intel(R) GPA Framework software installers, which may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 2023.3, update to version 2023.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Simics Package Manager versions prior to 1.8.3 **Description** The issue is related to an uncontrolled search path in some Intel(R) Simics Package Manager software, which may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 1.8.3, update to version 1.8.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) GPA software versions prior to 2024.1 **Description** The issue is related to an uncontrolled search path in some Intel(R) GPA software, which may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 2024.1, update to version 2024.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Intel(R) VROC software versions prior to 8.0.8.1001 **Description** The issue allows an authenticated user to potentially enable escalation of privilege via local access due to path transversal in some Intel(R) VROC software. **Recommendations** For versions prior to 8.0.8.1001, update to version 8.0.8.1001 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Intel(R) HID Event Filter software versions prior to 2.2.2.1 Description: The issue is related to insecure inherited permissions in some Intel(R) HID Event Filter software installers, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could be exploited by an attacker to gain elevated privileges. Recommendations: For versions prior to 2.2.2.1, update to version 2.2.2.1 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Intel(R) VROC software versions prior to 8.0.8.1001 **Description** The issue is related to an uncontrolled search path element in some Intel(R) VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is associated with the implementation of RAID array technology based on Intel VROC chipsets. Exploitation of the issue could allow an attacker to elevate their privileges. **Recommendations** For versions prior to 8.0.8.1001, update to version 8.0.8.1001 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Intel Binary Configuration Tool versions prior to 3.4.4 **Description** The issue is related to an uncontrolled search path in the Intel Binary Configuration Tool software. This may allow an authenticated user to potentially enable escalation of privilege via local access. **Recommendations** For versions prior to 3.4.4, update to version 3.4.4 or later to resolve the issue.