PT-2018-2571
CVE-2018-3704
·
Published
2018-12-11
·
Updated
2019-10-03
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Intel Parallel Studio versions prior to 2019 Gold
Description
The issue is related to improper directory permissions in the installer, which may allow authenticated users to potentially enable an escalation of privilege via local access. The vulnerability is associated with insufficient access restrictions, and its exploitation could allow an attacker to elevate their privileges.
Recommendations
For versions prior to 2019 Gold, update to version 2019 Gold or later to resolve the issue. As a temporary workaround, consider restricting access to the installer and ensuring proper directory permissions to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾