PT-2022-19727 · Sap · Sap Netweaver Application Server Abap+6

M. Li · Published 2022-06-14 · Updated 2022-10-27 · CVE-2022-29614

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, SAPHOSTAGENT 7.22

Description The issue concerns the SAP startservice, specifically the s-bit helper program sapuxuserchk on Unix systems, which can be physically abused, resulting in a privilege escalation for an attacker. This leads to a low impact on confidentiality and integrity but a significant impact on availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2022-29614

Affected Products

Abap Platform

Hana Database

Kernel

Krnl64Uc

Sap Netweaver Application Server Abap

Sap Netweaver Application Server Java

Sap Host Agent

References · 8

• 🔥 http://seclists.org/fulldisclosure/2022/Sep/18 · Exploit
• 🔥 http://packetstormsecurity.com/files/168409/SAP-SAPControl-Web-Service-Interface-Local-Privilege-Escalation.html · Exploit
• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29614 · Security Note
• https://launchpad.support.sap.com/#/notes/3158619 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-29614 · Vendor Advisory
• https://t.me/cvenotify/36310 · Telegram Post
• https://t.me/cibsecurity/44446 · Telegram Post