Improper access control in Intel products - CVE-2023-35121

Vulnerability identifier: #VU87125

CSH Severity: Low

CVSS v4: 7.3 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-35121

CWE-ID: CWE-284

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A local user can bypass implemented security restrictions and gain elevated privileges on the system.

Intel Cluster Checker
Intel Distribution for Python
Intel oneAPI AI Analytics Toolkit
Intel oneAPI Math Kernel Library
Intel VTune™ Profiler for oneAPI
Intel Integrated Performance Primitives
MPI Library
Intel Trace Analyzer and Collector
Intel IPP Cryptography
Intel oneAPI Threading Building Blocks
Intel Advisor for oneAPI
Intel Inspector for oneAPI
Intel oneAPI Base Toolkit
Intel oneAPI Deep Neural Network Library
Intel oneAPI HPC Toolkit
Intel oneAPI IoT Toolkit
oneAPI DPC++/C++ Compiler

Install updates from vendor's website.

Intel IPP Cryptography - update to 2021.8.0
MPI Library - update to 2021.10.0
Intel oneAPI Threading Building Blocks - update to 2021.10.0
Intel Advisor for oneAPI - update to 2023.2.0
Intel Inspector for oneAPI - update to 2023.2.0
Intel oneAPI Base Toolkit - update to 2023.2.0
Intel oneAPI Deep Neural Network Library - update to 2023.2.0
Intel oneAPI HPC Toolkit - update to 2023.2.0
Intel oneAPI IoT Toolkit - update to 2023.2.0
Intel oneAPI Math Kernel Library - update to 2023.2.0
Intel VTune™ Profiler for oneAPI - update to 2023.2.0
oneAPI DPC++/C++ Compiler - update to 2023.2.1

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00988.html

• Multiple vulnerabilities in Intel oneAPI Toolkit Software