CVEFinder.io

CVE-2022-45153

⚠️ high
🔍 Scan for this CVE
Summary

An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphan

Description

An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.

CVSS Score
7.0
High
EPSS Score
0.1
Exploit Probability
Published Date
2023-02-15
First Seen: 2026-01-05
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 52.0% of all 317,883 vulnerabilities in our database.

#152,521
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Mar 18, 2025
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
🏆 Discovered By
Johannes Segitz of SUSE
SSVC data provided by CISA
Last Modified 2024-11-21
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-276

📦 Affected Products 3

Vendor Product Status Affected Versions
suse linux_enterprise_server Affected
v12
opensuse leap Affected
v15.4
suse linux_enterprise_module_for_sap_applications Affected
v15

🔗 References 1

https://bugzilla.suse.com/show_bug.cgi?id=1205990
Exploit Issue Tracking

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-25702 ⚠️ high 7.3 0.1 A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causi... 2026-03-05
CVE-2025-32463 ⛔ critical 9.3 20.8 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director... 2025-06-30
CVE-2024-46951 ⚠️ high 7.8 0.1 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pa... 2024-11-10
CVE-2024-46953 ⚠️ high 7.8 0.1 An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the f... 2024-11-10
CVE-2024-46955 🔶 medium 5.5 0.1 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when readi... 2024-11-10
CVE-2024-46956 ⚠️ high 7.8 0.2 An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforal... 2024-11-10
These CVEs affect the same products