{"uuid": "6b857ef6-3bcd-449d-9511-296bc50f6a43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35292", "type": "seen", "source": "https://t.me/cibsecurity/49663", "content": "\u203c CVE-2022-35292 \u203c\n\nIn SAP Business One application when a service is created, the executable path contains spaces and isn\u00e2\u20ac\u2122t enclosed within quotes, leading to a vulnerability known as Unquoted Service Path which allows a user to gain SYSTEM privileges. If the service is exploited by adversaries, it can be used to gain privileged permissions on a system or network leading to high impact on Confidentiality, Integrity, and Availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-13T20:25:28.000000Z"}