CVE-2022-45153

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e

Description The issue is related to incorrect default permissions in the saphanabootstrap-formula of affected operating systems, allowing local attackers to escalate to root by manipulating the sudo configuration. This can be exploited by executing commands with elevated privileges.

Recommendations For SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e, update to version 0.13.1+git.1667812208.4db963e or later. For SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e, update to version 0.13.1+git.1667812208.4db963e or later. For openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e, update to version 0.13.1+git.1667812208.4db963e or later. As a temporary workaround, consider restricting access to the sudo configuration to minimize the risk of exploitation.