CVE-2022-45153 — HIGH (7.0)

Vulnerability Description

An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.

CVSS Score

7.0

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Suse	Linux Enterprise Module For Sap Applications	15
Opensuse	Leap	15.4
Suse	Linux Enterprise Server	12

Related Weaknesses (CWE)

CWE-276

References

https://bugzilla.suse.com/show_bug.cgi?id=1205990ExploitIssue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1205990ExploitIssue Tracking

FAQ

What is CVE-2022-45153?

CVE-2022-45153 is a vulnerability with a CVSS score of 7.0 (HIGH). An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 ...

How severe is CVE-2022-45153?

CVE-2022-45153 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-45153?

Check the references section above for vendor advisories and patch information. Affected products include: Suse Linux Enterprise Module For Sap Applications, Opensuse Leap, Suse Linux Enterprise Server.