Description
In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local attacker could elevate their privileges and compromise the affected system.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://www.progress.com/openedge ↗
- https://community.progress.com/s/article/Remediation-of-Privilege-Escalation-Security-Vulnerability-CVE-2022-29849 ↗
- https://community.progress.com/s/article/OpenEdge-12-2-9-Update-is-available ↗
- https://community.progress.com/s/article/OpenEdge-11-7-14-is-Now-Available ↗