{"id":"CVE-2022-45153","aliases":["EUVD-2022-48062","GHSA-4g85-9mh4-6cw4","SUSE-SU-2023:0009-1","SUSE-SU-2023:0010-1","SUSE-SU-2023:0011-1"],"status":"published","title":"saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls","description":"An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00223,"percentile":0.13067,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-276"],"published":"2023-01-02T10:42:37Z","modified":"2026-06-17T05:09:29Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Module for SAP Applications 15 SP2","package":"saphanabootstrap-formula","fixed_in":["0.13.1+git.1667812208.4db963e-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for SAP Applications 15 SP3","package":"saphanabootstrap-formula","fixed_in":["0.13.1+git.1667812208.4db963e-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for SAP Applications 15 SP4","package":"saphanabootstrap-formula","fixed_in":["0.13.1+git.1667812208.4db963e-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"saphanabootstrap-formula","fixed_in":["0.13.1+git.1667812208.4db963e-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"saphanabootstrap-formula","fixed_in":["0.13.1+git.1667812208.4db963e-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"saphanabootstrap-formula","fixed_in":["0.13.1+git.1667812208.4db963e-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"saphanabootstrap-formula","fixed_in":["0.13.1+git.1667812208.4db963e-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for SAP Applications 15 SP1","package":"saphanabootstrap-formula","fixed_in":["0.13.1+git.1667812208.4db963e-150000.1.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"saphanabootstrap-formula","fixed_in":["0.13.1+git.1667812208.4db963e-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"saphanabootstrap-formula","fixed_in":["0.13.1+git.1667812208.4db963e-4.18.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for SAP Applications 15 SP2","package":"saphanabootstrap-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+git.1667812208.4db963e-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for SAP Applications 15 SP3","package":"saphanabootstrap-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+git.1667812208.4db963e-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for SAP Applications 15 SP4","package":"saphanabootstrap-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+git.1667812208.4db963e-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"saphanabootstrap-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+git.1667812208.4db963e-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"saphanabootstrap-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+git.1667812208.4db963e-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"saphanabootstrap-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+git.1667812208.4db963e-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"saphanabootstrap-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+git.1667812208.4db963e-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for SAP Applications 15 SP1","package":"saphanabootstrap-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+git.1667812208.4db963e-150000.1.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"saphanabootstrap-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+git.1667812208.4db963e-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"saphanabootstrap-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1+git.1667812208.4db963e-4.18.1"}]}]}],"products":[{"vendor":"opensuse","product":"leap"},{"vendor":"opensuse","product":"opensuse leap 15.4"},{"vendor":"suse","product":"linux_enterprise_module_for_sap_applications"},{"vendor":"suse","product":"linux_enterprise_server"},{"vendor":"suse","product":"suse linux enterprise module for sap applications 15-sp1"},{"vendor":"suse","product":"suse linux enterprise server for sap 12-sp5"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1205990","tags":["x_transferred","Exploit","Issue Tracking"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45153"},{"url":"https://github.com/advisories/GHSA-4g85-9mh4-6cw4"},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230009-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1185643","tags":["report"]},{"url":"https://bugzilla.suse.com/1205990","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45153","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230010-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230011-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-45153","title":"saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls","description":"An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.","status":"published","published":"2023-02-15T00:00:00Z","modified":"2025-03-18T19:25:05.374Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:34:31.519788Z"}],"euvd":[{"id":"EUVD-2022-48062","description":"An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.","status":"published","published":"2023-02-15T00:00:00Z","modified":"2025-03-18T19:25:05Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:59.541218Z"}],"ghsa":[{"id":"GHSA-4g85-9mh4-6cw4","title":"An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux...","description":"An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.","status":"published","published":"2023-02-15T12:30:25Z","modified":"2023-03-04T05:08:14Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:54:16.644116Z"}],"nvd":[{"id":"CVE-2022-45153","description":"An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.","status":"published","published":"2023-02-15T10:15:16.97Z","modified":"2026-06-17T05:09:29.337Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:07:36.026349Z"}],"osv":[{"id":"SUSE-SU-2023:0009-1","title":"Security update for saphanabootstrap-formula","description":"This update for saphanabootstrap-formula fixes the following issues:\n\n- Version bump 0.13.1\n  * revert changes to spec file to re-enable SLES RPM builds\n  * CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/ha_cluster.sls (bsc#1205990)\n\n- Version bump 0.13.0\n  * pass sid to sudoers in a SLES12 compatible way\n  * add location constraint to gcp_stonith\n\n- Version bump 0.12.1\n  * moved templates dir into hana dir in repository to be gitfs compatible\n\n- Version bump 0.12.0\n  * add SAPHanaSR takeover blocker\n\n- Version bump 0.11.0\n  * use check_cmd instead of tmp sudoers file\n  * make sudoers rules more secure\n  * migrate sudoers to template file\n\n- Version bump 0.10.1\n  * fix hook removal conditions\n  * fix majority_maker code on case grain is empty\n\n- Version bump 0.10.0\n  * allow to disable shared HANA basepath and rework add_hosts code\n    (enables HANA scale-out on AWS)\n  * do not edit global.ini directly (if not needed)\n\n- Version bump 0.9.1\n  * fix majority_maker code on case grain is empty\n\n- Version bump 0.9.0\n  * define vip_mechanism for every provider and reorder resources\n    (same schema for all SAP related formulas)\n\n- Version bump 0.8.1\n  * use multi-target Hook on HANA scale-out\n\n- Version bump 0.8.0\n  * add HANA scale-out support\n  * add idempotence to not affect a running HANA and cluster\n\n- Version bump 0.7.2\n  * add native fencing for microsoft-azure\n\n- fixes a not working import of dbapi in SUSE/ha-sap-terraform-deployments#703\n- removes the installation and extraction of all hdbcli files in the /hana/shared/srHook directory\n- fixes execution order of srTakeover/srCostOptMemConfig hook\n- renames and updates hook srTakeover to srCostOptMemConfig\n\n- Changing exporter stickiness to =\u003e 0 and adjusting the colocation \n  score from +inf to -inf and changing the colocation from Master to Slave. \n  This change fix the impact of a failed exporter in regards to the HANA DB.\n\n- Document extra_parameters in pillar.example (bsc#1185643)\n\n- Change hanadb_exporter default timeout value to 30 seconds\n\n- Set correct stickiness for the azure-lb resource\n  The azure-lb resource receives an stickiness=0 to not influence on\n  transitions calculations as the HANA resources have more priority\n","status":"published","published":"2023-01-02T10:42:37Z","modified":"2026-02-04T03:33:01.751661Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0010-1","title":"Security update for saphanabootstrap-formula","description":"This update for saphanabootstrap-formula fixes the following issues:\n\n- Version bump 0.13.1\n  * revert changes to spec file to re-enable SLES RPM builds\n  * CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/ha_cluster.sls (bsc#1205990)\n\n- Version bump 0.13.0\n  * pass sid to sudoers in a SLES12 compatible way\n  * add location constraint to gcp_stonith\n\n- Version bump 0.12.1\n  * moved templates dir into hana dir in repository to be gitfs compatible\n\n- Version bump 0.12.0\n  * add SAPHanaSR takeover blocker\n\n- Version bump 0.11.0\n  * use check_cmd instead of tmp sudoers file\n  * make sudoers rules more secure\n  * migrate sudoers to template file\n\n- Version bump 0.10.1\n  * fix hook removal conditions\n  * fix majority_maker code on case grain is empty\n\n- Version bump 0.10.0\n  * allow to disable shared HANA basepath and rework add_hosts code\n    (enables HANA scale-out on AWS)\n  * do not edit global.ini directly (if not needed)\n\n- Version bump 0.9.1\n  * fix majority_maker code on case grain is empty\n\n- Version bump 0.9.0\n  * define vip_mechanism for every provider and reorder resources\n    (same schema for all SAP related formulas)\n\n- Version bump 0.8.1\n  * use multi-target Hook on HANA scale-out\n\n- Version bump 0.8.0\n  * add HANA scale-out support\n  * add idempotence to not affect a running HANA and cluster\n\n- Version bump 0.7.2\n  * add native fencing for microsoft-azure\n\n- fixes a not working import of dbapi in SUSE/ha-sap-terraform-deployments#703\n- removes the installation and extraction of all hdbcli files in the /hana/shared/srHook directory\n- fixes execution order of srTakeover/srCostOptMemConfig hook\n- renames and updates hook srTakeover to srCostOptMemConfig\n\n- Changing exporter stickiness to =\u003e 0 and adjusting the colocation \n  score from +inf to -inf and changing the colocation from Master to Slave. \n  This change fix the impact of a failed exporter in regards to the HANA DB.\n  \n\n- Document extra_parameters in pillar.example (bsc#1185643)\n\n- Change hanadb_exporter default timeout value to 30 seconds\n\n- Set correct stickiness for the azure-lb resource\n  The azure-lb resource receives an stickiness=0 to not influence on\n  transitions calculations as the HANA resources have more priority\n","status":"published","published":"2023-01-02T10:42:48Z","modified":"2026-02-04T04:14:04.912513Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0011-1","title":"Security update for saphanabootstrap-formula","description":"This update for saphanabootstrap-formula fixes the following issues:\n\n- Version bump 0.13.1\n  * revert changes to spec file to re-enable SLES RPM builds\n  * CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/ha_cluster.sls (bsc#1205990)\n\n- Version bump 0.13.0\n  * pass sid to sudoers in a SLES12 compatible way\n  * add location constraint to gcp_stonith\n\n- Version bump 0.12.1\n  * moved templates dir into hana dir in repository to be gitfs compatible\n\n- Version bump 0.12.0\n  * add SAPHanaSR takeover blocker\n\n- Version bump 0.11.0\n  * use check_cmd instead of tmp sudoers file\n  * make sudoers rules more secure\n  * migrate sudoers to template file\n\n- Version bump 0.10.1\n  * fix hook removal conditions\n  * fix majority_maker code on case grain is empty\n\n- Version bump 0.10.0\n  * allow to disable shared HANA basepath and rework add_hosts code\n    (enables HANA scale-out on AWS)\n  * do not edit global.ini directly (if not needed)\n\n- Version bump 0.9.1\n  * fix majority_maker code on case grain is empty\n\n- Version bump 0.9.0\n  * define vip_mechanism for every provider and reorder resources\n    (same schema for all SAP related formulas)\n\n- Version bump 0.8.1\n  * use multi-target Hook on HANA scale-out\n\n- Version bump 0.8.0\n  * add HANA scale-out support\n  * add idempotence to not affect a running HANA and cluster\n\n- Version bump 0.7.2\n  * add native fencing for microsoft-azure\n\n- fixes a not working import of dbapi in SUSE/ha-sap-terraform-deployments#703\n- removes the installation and extraction of all hdbcli files in the /hana/shared/srHook directory\n- fixes execution order of srTakeover/srCostOptMemConfig hook\n- renames and updates hook srTakeover to srCostOptMemConfig\n\n- Changing exporter stickiness to =\u003e 0 and adjusting the colocation \n  score from +inf to -inf and changing the colocation from Master to Slave. \n  This change fix the impact of a failed exporter in regards to the HANA DB.\n\n- Document extra_parameters in pillar.example (bsc#1185643)\n\n- Change hanadb_exporter default timeout value to 30 seconds\n\n- Set correct stickiness for the azure-lb resource\n  The azure-lb resource receives an stickiness=0 to not influence on\n  transitions calculations as the HANA resources have more priority\n","status":"published","published":"2023-01-02T10:42:57Z","modified":"2026-02-04T04:05:17.314536Z","updated_at":"2026-11-02T15:53:51.853735Z"}]}}