CVE-2022-22528CWE-427

SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under…

published February 9, 2022

CVSS
—
EPSS
0%
Percentile
23.3
In the wild
Unconfirmed
What it is

SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The issue is with the ASE installer and does not impact other ASE binaries.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00316 · 23.3th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2022-02-09T22:05Z
EPSS history
Timeline
  • 09 FEB 22:05Z
    SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under…
    cvelistv5