Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xh7r-hcfv-6wpx

Опубликовано: 10 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

In SAP Host Agent (Windows) - versions 7.21, 7.22, an attacker who gains local membership to SAP_LocalAdmin could be able to replace executables with a malicious file that will be started under a privileged account. Note that by default all user members of SAP_LocaAdmin are denied the ability to logon locally by security policy so that this can only occur if the system has already been compromised.

In SAP Host Agent (Windows) - versions 7.21, 7.22, an attacker who gains local membership to SAP_LocalAdmin could be able to replace executables with a malicious file that will be started under a privileged account. Note that by default all user members of SAP_LocaAdmin are denied the ability to logon locally by security policy so that this can only occur if the system has already been compromised.

EPSS

Процентиль: 28%
0.00101
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 6.4
nvd
около 3 лет назад

In SAP Host Agent (Windows) - versions 7.21, 7.22, an attacker who gains local membership to SAP_LocalAdmin could be able to replace executables with a malicious file that will be started under a privileged account. Note that by default all user members of SAP_LocaAdmin are denied the ability to logon locally by security policy so that this can only occur if the system has already been compromised.

EPSS

Процентиль: 28%
0.00101
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-284