{"id":"CVE-2022-26062","state":"PUBLISHED","title":"Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially e","description":"Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access.","publishedAt":"2023-02-16T19:59:46.697Z","updatedAt":"2025-01-27T18:24:51.377Z","severity":{"score":6.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","source":"intel"},"assigner":"intel","products":["n/a Intel(R) Trace Analyzer and Collector for Intel(R) oneAPI HPC Toolkit "],"affected":[{"vendor":"n/a","product":"Intel(R) Trace Analyzer and Collector for Intel(R) oneAPI HPC Toolkit ","defaultStatus":"unaffected","versions":[{"version":"before version 2021.6","status":"affected"}]}],"references":["http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:49.689Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/26xxx/CVE-2022-26062.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-26062","state":"PUBLISHED","datePublished":"2023-02-16T19:59:46.697Z","dateUpdated":"2025-01-27T18:24:51.377Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2022-03-09T23:14:09.697Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access."}],"affected":[{"vendor":"n/a","product":"Intel(R) Trace Analyzer and Collector for Intel(R) oneAPI HPC Toolkit ","defaultStatus":"unaffected","versions":[{"version":"before version 2021.6","status":"affected"}]}],"references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":6.7,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"escalation of privilege"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-02-16T19:59:46.697Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T04:56:37.424Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-27T17:30:43.488222Z","id":"CVE-2022-26062","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-27T18:24:51.377Z"}}]}}}