Skip to content
Fencer Intel
high 7.0

CVE-2022-45153 json

saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls

published 3y ago modified 4mo ago also EUVD-2022-48062

cvss
7.0
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 13%
public exploits
0
none known

Summary

An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.

Patch / fix

  • SUSE SUSE Linux Enterprise Module for SAP Applications 15-SP1 0.13.1+git.1667812208.4db963e
  • SUSE SUSE Linux Enterprise Server for SAP 12-SP5 0.13.1+git.1667812208.4db963e
  • openSUSE openSUSE Leap 15.4 0.13.1+git.1667812208.4db963e
  • saphanabootstrap-formula SLE Module for SAP Applications 15 SP4, SLE Module for SAP Applications 15 SP3, SLE Module for SAP Applications 15 SP2 +4 more 0.13.1+git.1667812208.4db963e-150200.3.15.1
  • saphanabootstrap-formula SLES for SAP 12 SP5, SLES for SAP 12 SP4 0.13.1+git.1667812208.4db963e-4.18.1
  • saphanabootstrap-formula SLE Module for SAP Applications 15 SP1 0.13.1+git.1667812208.4db963e-150000.1.19.1

suse advisories SUSE-SU-2023:0011-1SUSE-SU-2023:0010-1SUSE-SU-2023:0009-1

Is CVE-2022-45153 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
last yr.

Exploit prediction

0.22% chance of exploitation in the next 30 days, higher than 13% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • bugzilla.suse.com https://bugzilla.suse.com/show_bug.cgi?id=1205990 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • SUSE SUSE Linux Enterprise Module for SAP Applications 15-SP1
  • SUSE SUSE Linux Enterprise Server for SAP 12-SP5
  • openSUSE openSUSE Leap 15.4

Classification

Weakness
  • CWE-276 Incorrect Default Permissions

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.