← Retour aux CVEs
CVE-2022-22528
HIGH7.8
Description
SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The issue is with the ASE installer and does not impact other ASE binaries.
Details CVE
Score CVSS v3.17.8
SeveriteHIGH
Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vecteur d'attaqueLOCAL
ComplexiteLOW
Privileges requisLOW
Interaction utilisateurNONE
Publie2/9/2022
Derniere modification2/24/2026
Sourcenvd
Observations honeypot0
Produits affectes
microsoft:windowssap:adaptive_server_enterprise
Faiblesses (CWE)
CWE-427CWE-427
References
https://launchpad.support.sap.com/#/notes/3140564(cna@sap.com)
https://launchpad.support.sap.com/#/notes/3140564(af854a3a-2127-422b-91ae-364da2661108)
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html(af854a3a-2127-422b-91ae-364da2661108)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.