CVE-2018-3704

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
Dec 14, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-37055.5Improper directory permissions in the installer for the Intel(R) System Defense Utility (all versions) may allow authenticated users to poteCVE-2018-37107.8Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resultinCVE-2018-37117.5Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" andCVE-2018-37126.5serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in pathCVE-2018-37136.5angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a maCVE-2018-37146.5node-srv node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read conCVE-2018-37156.5glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a mCVE-2018-37165.4simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.CVE-2018-37175.4connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.jCVE-2018-37185.3serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.CVE-2018-37198.8mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious useCVE-2018-37208.8assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious us