Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-27638

Uncontrolled search path element in the Intel(R) Advanced Link Analyzer Pro before version 22.2 and Standard edition software before version 22.1.1 STD may allow an authenticated user to potentially enable escalation of privilege via local access.

Published

2022-11-11T16:15:13.627

Last Modified

2025-02-05T21:15:16.537

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

Weaknesses

Type: Primary
CWE-427
Type: Secondary
CWE-427

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	intel	advanced_link_analyzer	< 22.1.1	Yes
Application	intel	advanced_link_analyzer	< 22.2	Yes

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00715.html Patch, Vendor Advisory ([email protected])
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00715.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)