// For flags

CVE-2022-22544

 

Severity Score

9.1
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty for the SAP Solution Manager administrator. Impacts of unauthorized execution of commands can lead to sensitive information disclosure, loss of system integrity and denial of service.

Solution Manager (Diagnostics Root Cause Analysis Tools) - versión 720, permite a un administrador ejecutar código en todos los Agentes de Diagnóstico conectados y examinar los archivos de sus sistemas. Un atacante podría así controlar los sistemas administrados. Es considerado que falta una segregación de funciones para el administrador de SAP Solution Manager. Los efectos de la ejecución no autorizada de comandos pueden conllevar a una divulgación de información confidencial, la pérdida de la integridad del sistema y la denegación de servicio

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-01-04 CVE Reserved
  • 2022-02-09 CVE Published
  • 2023-09-02 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sap
Search vendor "Sap"
 Solution Manager
Search vendor "Sap" for product "Solution Manager"
 7.20
Search vendor "Sap" for product "Solution Manager" and version "7.20"
-
Affected