Privilege escalation

2022-05-0200:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local attacker could elevate their privileges and compromise the affected system.

CPENameOperatorVersion
openedgege12.0.0
openedgelt12.2.9
openedgege11.7
openedgelt11.7.14

Name	Operator	Version
openedge	ge	12.0.0
openedge	lt	12.2.9
openedge	ge	11.7
openedge	lt	11.7.14

References

community.progress.com/s/article/OpenEdge-11-7-14-is-Now-Available

community.progress.com/s/article/OpenEdge-12-2-9-Update-is-available

community.progress.com/s/article/Remediation-of-Privilege-Escalation-Security-Vulnerability-CVE-2022-29849

www.progress.com/openedge