{"id":"CVE-2022-27187","state":"PUBLISHED","title":"Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable esc","description":"Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable escalation of privilege via local access.","publishedAt":"2022-11-11T15:48:42.269Z","updatedAt":"2025-02-05T20:52:35.658Z","severity":{"score":6.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","source":"intel"},"assigner":"intel","products":["n/a Intel(R) Quartus Prime Standard edition software"],"affected":[{"vendor":"n/a","product":"Intel(R) Quartus Prime Standard edition software","defaultStatus":"unaffected","versions":[{"version":"before version 21.1 Patch 0.02std","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T19:49:52.117Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/27xxx/CVE-2022-27187.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-27187","state":"PUBLISHED","datePublished":"2022-11-11T15:48:42.269Z","dateUpdated":"2025-02-05T20:52:35.658Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","requesterUserId":"524a9a6b-3515-4b97-ab85-1a9a79493852","dateReserved":"2022-04-05T15:11:17.474Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable escalation of privilege via local access."}],"affected":[{"vendor":"n/a","product":"Intel(R) Quartus Prime Standard edition software","defaultStatus":"unaffected","versions":[{"version":"before version 21.1 Patch 0.02std","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":6.7,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"escalation of privilege"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-02-07T04:31:45.250Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T05:25:31.018Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-29T20:41:30.350318Z","id":"CVE-2022-27187","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-427","type":"CWE","lang":"en","description":"CWE-427 Uncontrolled Search Path Element"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-05T20:52:35.658Z"}}]}}}