AVID-2026-R1228

Description

Vulnerability CVE-2023-28380

Details

Uncontrolled search path for the Intel(R) AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Reason for inclusion in AVID: CVE-2023-28380 describes an Uncontrolled search path vulnerability in Intel AI Hackathon software prior to 2.0.0, enabling privilege escalation via network access. The affected product is an AI development/tooling component, which is part of AI software stacks; this places it within the supply chain for general-purpose AI systems (as a dependency/tooling artifact). It is a standard security vulnerability with clear exploitation potential (RCE/privilege escalation). The CVE entry and references provide sufficient signal for classification.

References

• NVD entry
• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00877.html

Affected or Relevant Artifacts

• Developer: n/a
• Deployer: n/a
• Artifact Details:

Impact

AVID Taxonomy Categorization

• Risk domains: Security
• SEP subcategories: S0100: Software Vulnerability
• Lifecycle stages: L06: Deployment

CVSS

CWE

Other information

• Report Type: Advisory
• Credits:
• Date Reported: 2023-08-11
• Version: 0.3.3
• AVID Entry