CVE-2024-29085 MEDIUM

CVE-2024-29085

Vendor N/A
Product BigDL software maintained by Intel(R)
Weakness CWE-284
Published November 13, 2024
Last update November 14, 2024
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Improper access control for some BigDL software maintained by Intel(R) before version 2.5.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.

Key dates

02Disclosure timeline

November 13, 2024 CVE published
November 14, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2020-25634 CVE-2024-13430 Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode CVE-2026-24303 Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2019-3779 Cloud Foundry Container Runtime allows a user to bypass security policy when talking to ETCD CVE-2023-24485 Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows