Back to search
CVE-2022-31590
Published: Jun 14, 2022
Modified: Aug 3, 2024
PUBLISHED
Description
SAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local access, with the ability to work around system’s root disk access restrictions to Write/Create a program file on system disk root path, which could then be executed with elevated privileges of the application during application start up or reboot, potentially compromising Confidentiality, Integrity and Availability of the system.
| Vendor | Product | Versions |
|---|---|---|
SAP SE | SAP PowerDesigner Proxy 16.7 | affected 16.7 |
Weaknesses (CWE)
References
https://launchpad.support.sap.com/#/notes/3197005
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now