CVE-2022-26344

{"id": "CVE-2022-26344", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-08-18T20:15:10.957", "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00701.html", "tags": ["Vendor Advisory"], "source": "secure@intel.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-276"}]}], "descriptions": [{"lang": "en", "value": "Incorrect default permissions in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to potentially enable escalation of privilege via local access."}, {"lang": "es", "value": "Unos permisos predeterminados incorrectos en los binarios de instalaci\u00f3n para Intel(R) SEAPI todas las versiones pueden permitir que un usuario autenticado permita potencialmente una escalada de privilegios por medio de acceso local."}], "lastModified": "2022-08-22T19:56:26.720", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:intel:single_event_api:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CC7F440-27CE-4D6C-B4E0-135C9FA95E4E"}], "operator": "OR"}]}], "sourceIdentifier": "secure@intel.com"}