CVE-2024-23908

MEDIUM

Flexlm License Daemons For Intel Fpga < 11.19.5.0 - Incorrect Permission Assignment

Title source: rule

Description

Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

References (1)

[Vendor Advisory] https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01107.html

Scores

CVSS v3 6.7

EPSS 0.0007

EPSS Percentile 21.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-277 CWE-732

Status published

Affected Products (1)

intel/flexlm_license_daemons_for_intel_fpga < 11.19.5.0

Timeline

Published Aug 14, 2024

Tracked Since Feb 18, 2026