CVE-2022-25841

{"id": "CVE-2022-25841", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-08-18T20:15:10.693", "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00678.html", "tags": ["Vendor Advisory"], "source": "secure@intel.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path elements in the Intel(R) Datacenter Group Event Android application, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access."}, {"lang": "es", "value": "Unos elementos de la ruta de b\u00fasqueda no controlados en la aplicaci\u00f3n Intel(R) Datacenter Group Event Android, en todas sus versiones, pueden permitir que un usuario autenticado habilite potencialmente una escalada de privilegios por medio del acceso local."}], "lastModified": "2022-08-22T15:32:02.627", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:intel:datacenter_group_event:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "E94CFFDB-F5A3-4FA3-93E9-4110151ACA31"}], "operator": "OR"}]}], "sourceIdentifier": "secure@intel.com"}