CVE-2022-31591

Publication date

2022-07-12 20:27:08

Family

sap

State

PUBLISHED

Description

SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service