{"id":"CVE-2022-36397","state":"PUBLISHED","title":"Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation","description":"Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access.","publishedAt":"2023-02-16T20:00:25.512Z","updatedAt":"2025-01-27T18:14:03.479Z","severity":{"score":7.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","source":"intel"},"assigner":"intel","products":["n/a Intel(R) QAT drivers for Linux"],"affected":[{"vendor":"n/a","product":"Intel(R) QAT drivers for Linux","defaultStatus":"unaffected","versions":[{"version":"before version 4.17","status":"affected"}]}],"references":["http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00751.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:50:21.136Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/36xxx/CVE-2022-36397.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-36397","state":"PUBLISHED","datePublished":"2023-02-16T20:00:25.512Z","dateUpdated":"2025-01-27T18:14:03.479Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2022-08-02T03:00:25.710Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access."}],"affected":[{"vendor":"n/a","product":"Intel(R) QAT drivers for Linux","defaultStatus":"unaffected","versions":[{"version":"before version 4.17","status":"affected"}]}],"references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00751.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00751.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"escalation of privilege"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-02-16T20:00:25.512Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00751.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00751.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T10:00:04.311Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-27T17:29:15.588189Z","id":"CVE-2022-36397","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-27T18:14:03.479Z"}}]}}}