« Volver al listado

CVE-2018-18093

Estado: ModificadaAlta (7.8)—

Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gain privileged access via local access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Intel — Vtune Amplifier

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-18093",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@intel.com",
      "affectedData": [
        {
          "vendor": "Intel Corporation",
          "product": "Intel VTune Amplifier",
          "versions": [
            {
              "status": "affected",
              "version": "Intel VTune Amplifier 2018 Update 3 and before"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-12-14T00:29:01.237",
  "references": [
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00194.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00194.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gain privileged access via local access."
    },
    {
      "lang": "es",
      "value": "Permisos de archivo incorrectos en el instalador de Intel VTune Amplifier 2018 Update 3 y anteriores podría permitir que usuarios sin privilegios obtenga acceso privilegiado mediante un acceso local."
    }
  ],
  "lastModified": "2026-06-17T01:46:46.857",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:intel:vtune_amplifier:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD2326FA-4DC7-42A2-8109-187692C6457D",
              "versionEndIncluding": "2018"
            },
            {
              "criteria": "cpe:2.3:a:intel:vtune_amplifier:2018:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6538D07B-7091-4BCC-B04A-64000E7BF839"
            },
            {
              "criteria": "cpe:2.3:a:intel:vtune_amplifier:2018:update2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB6FC5C8-FBB7-4337-B06B-A38BE5DC1C94"
            },
            {
              "criteria": "cpe:2.3:a:intel:vtune_amplifier:2018:update3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64C77B95-6966-4E49-A24C-1BE3CFD0EBAA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@intel.com"
}