CVE-2025-23233
Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.1
- CVSS vector
- CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
- EPSS probability
- 0.21%
- CWE
- CWE-279
- Published
- 2025-05-13
- Last modified
- 2026-03-13
Affected products
- n/a Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
Weakness type
Related vulnerabilities
- CVE-2026-46388 — osquery: Unprivileged users can temporarily read file carve contents
- CVE-2026-4948 — Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
- CVE-2026-20062 — A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in...
- CVE-2025-12801 — Nfs-utils: rpc.mountd in the nfs-utils privilege escalation
- CVE-2025-14025 — Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions
- CVE-2025-36228 — Incorrect Execution-Assigned Permissions in IBM Aspera Faspex
- CVE-2025-13663 — Quartus Prime Pro Edition Installer Advisory
- CVE-2024-25621 — containerd affected by a local privilege escalation via wide permissions on CRI directory