What is CVE-2022-31590?

CVE-2022-31590 is a high-severity vulnerability in Sap Powerdesigner Proxy, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2022-06-14.

How severe is CVE-2022-31590?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Sap Powerdesigner Proxy

CVE-2022-31590

SAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local access, with the ability to work around system’s root disk access restrictions to Write/Create a program file on system disk root path, which could then be executed with elevated privileges of the application during application start up or reboot, potentially compromising Confidentiality, Integrity and Availability of the system.

EPSS: 0.002 (15.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sap Powerdesigner_proxy — versions 16.7
Sap Se Powerdesigner Proxy 16.7 — versions 16.7

Weakness classification (CWE)

CWE-428 — Unquoted Search Path or Element

References

cna@sap.com (x_refsource_MISC, Vendor Advisory)
cna@sap.com (Permissions Required, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-31590?: CVE-2022-31590 is a high-severity vulnerability in Sap Powerdesigner Proxy, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2022-06-14.
How severe is CVE-2022-31590?: High severity. CVSS v3 base score is 7.8 out of 10.