Количество 3
Количество 3
CVE-2022-31590
SAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local access, with the ability to work around system’s root disk access restrictions to Write/Create a program file on system disk root path, which could then be executed with elevated privileges of the application during application start up or reboot, potentially compromising Confidentiality, Integrity and Availability of the system.
GHSA-2qxv-q349-j3hw
SAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local access, with the ability to work around system’s root disk access restrictions to Write/Create a program file on system disk root path, which could then be executed with elevated privileges of the application during application start up or reboot, potentially compromising Confidentiality, Integrity and Availability of the system.
BDU:2022-04104
Уязвимость службы преобразования SQL-запросов SAP PowerDesigner Proxy, связанная с отсутствием кавычек в написании элементов или путей поиска, позволяющая нарушителю повысить свои привилегии
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-31590 SAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local access, with the ability to work around system’s root disk access restrictions to Write/Create a program file on system disk root path, which could then be executed with elevated privileges of the application during application start up or reboot, potentially compromising Confidentiality, Integrity and Availability of the system. | CVSS3: 7.8 | 0% Низкий | больше 3 лет назад |
| GHSA-2qxv-q349-j3hw SAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local access, with the ability to work around system’s root disk access restrictions to Write/Create a program file on system disk root path, which could then be executed with elevated privileges of the application during application start up or reboot, potentially compromising Confidentiality, Integrity and Availability of the system. | CVSS3: 7.8 | 0% Низкий | больше 3 лет назад |
 | BDU:2022-04104 Уязвимость службы преобразования SQL-запросов SAP PowerDesigner Proxy, связанная с отсутствием кавычек в написании элементов или путей поиска, позволяющая нарушителю повысить свои привилегии | CVSS3: 7.8 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу