PT-2024-8834 · Intel · Intel Oneapi Dpc++/C++ Compiler
CVSS v3.1
6.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Intel(R) oneAPI DPC++/C++ Compiler versions prior to 2024.2
Description:
The issue is related to an uncontrolled search path in the Intel(R) oneAPI DPC++/C++ Compiler, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to elevate their privileges.
Recommendations:
For versions prior to 2024.2, update to version 2024.2 or later to resolve the issue. As a temporary workaround, consider restricting local access to the compiler until the update can be applied.
Fix
Uncontrolled Search Path Element
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Intel Oneapi Dpc++/C++ Compiler