CVE-2023-28380

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Aug 11, 2023
Updated: Nov 7, 2023
CWE ID 427

Summary

CVE-2023-28380 is a vulnerability affecting the Intel(R) AI Hackathon software prior to version 2.0.0. This issue involves an uncontrolled search path, which can potentially be exploited by an unauthenticated user via network access. By manipulating the search path, an attacker may be able to escalate their privileges, granting them unauthorized access to sensitive data or functionality within the system. This vulnerability poses a significant risk to organizations that utilize the Intel(R) AI Hackathon software and should be addressed promptly by updating to the latest version or implementing appropriate mitigations.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share