Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xj35-g37r-frw9

Опубликовано: 14 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a company. This leads to high impact on confidentiality, integrity and availability of the Windows server.

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a company. This leads to high impact on confidentiality, integrity and availability of the Windows server.

EPSS

Процентиль: 7%
0.00027
Низкий

7.8 High

CVSS3

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 7.8
nvd
около 1 года назад

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a company. This leads to high impact on confidentiality, integrity and availability of the Windows server.

CVSS3: 7.8
fstec
больше 1 года назад

Уязвимость инструмента для упрощения установки и настройки систем SAP SAP Setup, связанная с неконтролируемым элементом пути поиска, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 7%
0.00027
Низкий

7.8 High

CVSS3

Дефекты

CWE-427