{"containers": {"cna": {"affected": [{"product": "Intel(R) Graphics Drivers", "vendor": "Intel", "versions": [{"status": "affected", "version": "before versions 26.20.100.7584"}, {"status": "affected", "version": "15.45.30.5103"}, {"status": "affected", "version": "15.40.44.5107"}, {"status": "affected", "version": "15.36.38.5117"}, {"status": "affected", "version": "15.33.49.5100"}, {"status": "affected", "version": "See advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html"}]}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access"}], "problemTypes": [{"descriptions": [{"description": "Escalation of Privilege", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-08-17T21:06:08", "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://security.netapp.com/advisory/ntap-20200320-0003/"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00369.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@intel.com", "ID": "CVE-2020-0515", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Intel(R) Graphics Drivers", "version": {"version_data": [{"version_value": "before versions 26.20.100.7584"}, {"version_value": "15.45.30.5103"}, {"version_value": "15.40.44.5107"}, {"version_value": "15.36.38.5117"}, {"version_value": "15.33.49.5100"}, {"version_value": "See advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html"}]}}]}, "vendor_name": "Intel"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access"}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Escalation of Privilege"}]}]}, "references": {"reference_data": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html", "refsource": "CONFIRM", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html"}, {"name": "https://security.netapp.com/advisory/ntap-20200320-0003/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20200320-0003/"}, {"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00369.html", "refsource": "CONFIRM", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00369.html"}]}}}}, "cveMetadata": {"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "assignerShortName": "intel", "cveId": "CVE-2020-0515", "datePublished": "2020-03-12T19:59:32", "dateReserved": "2019-10-28T00:00:00", "dateUpdated": "2020-08-17T21:06:08", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "E6D014D7-B878-4DD8-A1D3-82FC177B819C", "versionEndExcluding": "15.33.49.5100", "versionStartIncluding": "15.33", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "7DAB4DEB-3BCE-48A0-AAB9-842129D5DEC5", "versionEndExcluding": "15.36.38.5117", "versionStartIncluding": "15.36", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "A7250C6F-1E48-4E0B-AACB-52D4FC3F494D", "versionEndExcluding": "15.40.44.5107", "versionStartIncluding": "15.40", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "AB43B202-E327-43C3-8F68-A1CC5E6C8300", "versionEndExcluding": "15.45.30.5103", "versionStartIncluding": "15.45", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "5B60CA50-4975-4295-99F7-D14A1C401776", "versionEndExcluding": "26.20.100.7584", "versionStartIncluding": "26.20", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access"}, {"lang": "es", "value": "El elemento de ruta de b\u00fasqueda no controlada en el instalador para Intel(R) Graphics Drivers versiones anteriores a 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 y 15.33.49.5100, puede permitir a un usuario autenticado habilitar potencialmente una escalada de privilegios por medio de un acceso local"}], "id": "CVE-2020-0515", "lastModified": "2021-05-19T16:51:43.377", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-03-12T20:15:12.643", "references": [{"source": "secure@intel.com", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20200320-0003/"}, {"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html"}, {"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00369.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-427"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}