Read the docs
TI-2022-22227 Aliases CVE-2022-45153GHSA-4g85-9mh4-6cw4

saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls

Priority LOW 35CWE-276Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00223 13th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed SUSE Linux Enterprise Module for SAP Applications 15-SP1 (SUSE): 0.13.1+git.1667812208.4db963eSUSE Linux Enterprise Server for SAP 12-SP5 (SUSE): 0.13.1+git.1667812208.4db963e+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SUSESUSE Linux Enterprise Module for SAP Applications 15-SP1saphanabootstrap-formula to before 0.13.1+git.1667812208.4db963e0.13.1+git.1667812208.4db963ePatch availableCNA
SUSESUSE Linux Enterprise Server for SAP 12-SP5saphanabootstrap-formula to before 0.13.1+git.1667812208.4db963e0.13.1+git.1667812208.4db963ePatch availableCNA
openSUSEopenSUSE Leap 15.4saphanabootstrap-formula to before 0.13.1+git.1667812208.4db963e0.13.1+git.1667812208.4db963ePatch availableCNA
  • SUSE Linux Enterprise Module for SAP Applications 15-SP1 VendorSUSE Affected saphanabootstrap-formula to before 0.13.1+git.1667812208.4db963e Fixed in 0.13.1+git.1667812208.4db963e Patch available CNA
  • SUSE Linux Enterprise Server for SAP 12-SP5 VendorSUSE Affected saphanabootstrap-formula to before 0.13.1+git.1667812208.4db963e Fixed in 0.13.1+git.1667812208.4db963e Patch available CNA
  • openSUSE Leap 15.4 VendoropenSUSE Affected saphanabootstrap-formula to before 0.13.1+git.1667812208.4db963e Fixed in 0.13.1+git.1667812208.4db963e Patch available CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:suse:linux_enterprise_module_for_sap_applications:15:sp1:*:*:*:*:*:*15 sp1VulnerableSUSE
cpe:2.3:o:opensuse:leap:15.4:*:*:*:*:*:*:*15.4VulnerableopenSUSE
cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:*:sap:*:*12 sp5VulnerableSUSE
  • cpe:2.3:a:suse:linux_enterprise_module_for_sap_applications:15:sp1:*:*:*:*:*:* Versions 15 sp1 Vulnerable ·SUSE
  • cpe:2.3:o:opensuse:leap:15.4:*:*:*:*:*:*:* Versions 15.4 Vulnerable ·openSUSE
  • cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:*:sap:*:* Versions 12 sp5 Vulnerable ·SUSE

Remediation

  • Fix · CNA SUSE Linux Enterprise Module for SAP Applications 15-SP1 (SUSE) Fixed in 0.13.1+git.1667812208.4db963e
  • Fix · CNA SUSE Linux Enterprise Server for SAP 12-SP5 (SUSE) Fixed in 0.13.1+git.1667812208.4db963e
  • Fix · CNA openSUSE Leap 15.4 (openSUSE) Fixed in 0.13.1+git.1667812208.4db963e

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-45153
  2. 2026-10-03 Alias added: GHSA-4g85-9mh4-6cw4

References

Exploit 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences