SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The issue is with the ASE installer and does not impact other ASE binaries.
References
Link | Resource |
---|---|
https://launchpad.support.sap.com/#/notes/3140564 | Permissions Required Vendor Advisory |
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: sap
Published: 2022-02-09T22:05:19
Updated: 2023-08-14T12:54:07.297Z
Reserved: 2022-01-04T00:00:00
Link: CVE-2022-22528
JSON object: View
NVD Information
Status : Modified
Published: 2022-02-09T23:15:18.377
Modified: 2023-08-14T13:15:09.393
Link: CVE-2022-22528
JSON object: View
Redhat Information
No data.
CWE