CVE-2022-39013

Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker to modify system data and make the system unavailable leading to high impact on confidentiality and low impact on integrity and availability of the application.

• CWE-200

• https://launchpad.support.sap.com/#/notes/3229132Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory
• https://launchpad.support.sap.com/#/notes/3229132Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory

Published

Oct 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39008The NFC module has bundle serialization/deserialization vuln…9.1
• CVE-2022-39009The WLAN module has a vulnerability in permission verificati…9.8
• CVE-2022-3901Prototype Pollution in Visioweb.js 1.10.6 allows attackers t…6.1
• CVE-2022-39010The HwChrService module has a vulnerability in permission co…7.5
• CVE-2022-39011The HISP module has a vulnerability of bypassing the check o…7.5
• CVE-2022-39012Huawei Aslan Children's Watch has an improper input validati…7.5
• CVE-2022-39014Under certain conditions SAP BusinessObjects Business Intell…5.3
• CVE-2022-39015Under certain conditions, BOE AdminTools/ BOE SDK allows an …6.5
• CVE-2022-39016 Javascript injection in PDFtron in M-Files Hubshare before …8.8
• CVE-2022-39017 Improper input validation and output encoding in all comm…5.4
• CVE-2022-39018 Broken access controls on PDFtron data in M-Files Hubshare …7.5
• CVE-2022-39019 Broken access controls on PDFtron WebviewerUI in M-Files Hu…7.5