CVE-2024-36294CWE-277

Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of…

Medium · published November 13, 2024

CVSS v4.0
5.4
EPSS
0%
Percentile
3.0
In the wild
Unconfirmed
What it is

Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.

The record
Technical detail
CVSS v4.0
5.4 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00139 · 3.0th percentile
Weakness
CWE-277 · Insecure Inherited Permissions
Published
2024-11-13T21:11Z
EPSS history
Timeline
  • 13 NOV 21:11Z
    Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of…
    cvelistv5