Insecure Inherited Permissions in Intel oneAPI Toolkits oneapi-cli - CVE-2022-25992
Published: March 10, 2023
Vulnerability identifier: #VU73234
CSH Severity: Low
CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-25992
CWE-ID: CWE-277
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insecure inherited permissions, which leads to security restrictions bypass and privilege escalation.
Affected software
Intel oneAPI Toolkits oneapi-cli
How to mitigate CVE-2022-25992
Install updates from vendor's website.
Intel oneAPI Toolkits oneapi-cli - update to 0.2.0