CVE-2022-31591

2022-07-1220:27:08

CWE-428

sap

www.cve.org

sap

businessobjects

publisher service

vulnerability

elevated privileges

executable file

AI Score

8.4

Confidence

High

EPSS

Percentile

5.1%

JSON

SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service

CNA Affected

[
  {
    "product": "SAP BusinessObjects (BW Publisher Service)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "420"
      },
      {
        "status": "affected",
        "version": "430"
      }
    ]
  }
]