CVE-2023-27505

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Incorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

Vendor	Product	Versions
n/a	Intel(R) Advanced Link Analyzer Standard Edition software installers	before version 22.1 .1

References

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00848.htmlVendor Advisory
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00848.htmlVendor Advisory

Timeline

Published: Aug 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-275067.8Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to pot CVE-2023-275079.8MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save o CVE-2023-275097.8Improper access control in some Intel(R) ISPC software installers before version 1.19.0 may allow an authenticated user to potentially enabl CVE-2023-27515.3The Upload Resume WordPress plugin through 1.2.0 does not validate the captcha parameter when uploading a resume via the resume_upload_form CVE-2023-275107.5JB Inquiry form contains an exposure of private personal information to an unauthorized actor vulnerability, which may allow a remote unauth CVE-2023-275127.2Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8 CVE-2023-275137.8Uncontrolled search path element in some Intel(R) Server Information Retrieval Utility software before version 16.0.9 may allow an authentic CVE-2023-275148.8OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versi CVE-2023-275159.6Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalati CVE-2023-275167.8An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. A speciall CVE-2023-275177.8Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an a CVE-2023-275188.8Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F v