CVE-2023-24592

Vulnerability

The vulnerability is a path traversal issue in certain Intel(R) oneAPI Toolkits and component software. Affected versions are those prior to 2023.1. The flaw exists in how the software handles file paths, potentially allowing an authenticated user to bypass intended directory restrictions.

Exploitation

An authenticated user with local access to a system running an affected version of the Intel oneAPI Toolkits can exploit this path traversal vulnerability. The attacker does not require any special privileges beyond basic user authentication. By crafting specific file path inputs, the attacker can traverse outside of restricted directories.

Impact

Successful exploitation could allow the attacker to access or write files in locations outside their intended authorization scope. This could lead to escalation of privilege, potentially gaining higher-level access to system resources [1].

Mitigation

Intel released version 2023.1 of the oneAPI Toolkits to address this vulnerability. Users should update to version 2023.1 or later [1]. There are no known workarounds for earlier versions.