PT-2020-1555 · Intel · Intel Vtune Amplifier

Published 2020-01-14 · Updated 2021-07-21 · CVE-2019-14613

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel VTune Amplifier versions prior to update 8

Description The issue is related to improper access control and insecure privilege management in Intel VTune Amplifier. This could allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For Intel VTune Amplifier versions prior to update 8, apply update 8 to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2020-00550

CVE-2019-14613

Affected Products

Intel Vtune Amplifier

References · 4

• https://bdu.fstec.ru/vul/2020-00550 · Security Note
• https://osv.dev/vulnerability/CVE-2019-14613 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00325.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14613 · Security Note