Vulnerability Details CVE-2022-29849
In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local attacker could elevate their privileges and compromise the affected system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 0.9%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
References
- https://community.progress.com/s/article/OpenEdge-11-7-14-is-Now-Available
- https://community.progress.com/s/article/OpenEdge-12-2-9-Update-is-available
- https://community.progress.com/s/article/Remediation-of-Privilege-Escalation-Security-Vulnerability-CVE-2022-29849
- https://www.progress.com/openedge
- https://community.progress.com/s/article/OpenEdge-11-7-14-is-Now-Available
- https://community.progress.com/s/article/OpenEdge-12-2-9-Update-is-available
- https://community.progress.com/s/article/Remediation-of-Privilege-Escalation-Security-Vulnerability-CVE-2022-29849
- https://www.progress.com/openedge
Products affected by CVE-2022-29849
-
cpe:2.3:a:progress:openedge:11.7
-
cpe:2.3:a:progress:openedge:12.1
-
cpe:2.3:a:progress:openedge:12.2
-
cpe:2.3:a:progress:openedge:12.2.3
-
cpe:2.3:a:progress:openedge:12.2.4
-
cpe:2.3:a:progress:openedge:12.2.5
-
cpe:2.3:a:progress:openedge:12.2.6
-
cpe:2.3:a:progress:openedge:12.2.7
-
cpe:2.3:a:progress:openedge:12.2.8