« Volver al listado

CVE-2018-3704

Estado: ModificadaAlta (7.8)—

Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Intel — Parallel StudioIntel — Parallel Studio XE

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-3704",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@intel.com",
      "affectedData": [
        {
          "vendor": "Intel Corporation",
          "product": "Intel Parallel Studio",
          "versions": [
            {
              "status": "affected",
              "version": "Before Intel Parallel Studio before Intel System Studio 2019 Gold"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-12-14T00:29:01.453",
  "references": [
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00208.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00208.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access."
    },
    {
      "lang": "es",
      "value": "Permisos de directorio incorrectos en el instalador de Intel Parallel Studio en versiones anteriores a la 2019 Gold podrían permitir que un usuario autenticado habilite el escalado de privilegios mediante acceso local."
    }
  ],
  "lastModified": "2026-06-17T01:57:41.963",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:intel:parallel_studio:*:*:*:*:gold:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5671C44C-FA72-477B-9ECC-DFFEB0B7E047",
              "versionEndExcluding": "2019"
            },
            {
              "criteria": "cpe:2.3:a:intel:parallel_studio_xe:-:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B3D072C-D9E1-4332-B2A4-96FE470A9E03"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@intel.com"
}