Local Privilege Escalation in SAP PowerDesigner Proxy by SAP

CVE-2022-31590

What is CVE-2022-31590?

SAP PowerDesigner Proxy version 16.7 is susceptible to a local privilege escalation vulnerability that allows an attacker with low privileges and local access to bypass system's root disk access restrictions. By writing or creating a program file in the system disk root path, the attacker could execute this file with elevated application privileges at startup or upon rebooting the system. This could lead to severe compromises in the confidentiality, integrity, and availability of the affected system.

References