CVE-2025-20048_CVE-2025-20048

6.7 / 10

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

Uncontrolled search path for the Intel(R) Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access.

Basic Information

ID CVE-2025-20048

Source intel

Published Aug 12, 2025 at 16:58

Modified Aug 14, 2025 at 03:56

Affected Product

Vendor n/a

Product Intel(R) Trace Analyzer and Collector software

Version See references

Affected Versions n/a Intel(R) Trace Analyzer and Collector software See references

CWE Classification

CWE-427

References

intel.com /content/www/us/en/security-center/advisory/intel-sa-01266.html

{
    "lastseen": "",
    "description": "Uncontrolled search path for the Intel(R) Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access.",
    "published": "2025-08-12T16:58:01.740Z",
    "modified": "2025-08-14T03:56:12.919Z",
    "type": "cve",
    "title": "CVE-2025-20048",
    "source": "intel",
    "references": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01266.html",
    "id": "CVE-2025-20048",
    "bulletinFamily": "",
    "cwe": [
        "CWE-427"
    ],
    "cvelist": null,
    "sourceData": "n/a Intel(R) Trace Analyzer and Collector software See references",
    "sourceHref": "",
    "cvss": {
        "score": 6.7,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Intel(R) Trace Analyzer and Collector software",
    "version": "See references",
    "vendor": "n/a",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}