Описание
A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup (Software Installation Program) - version 9.0, resulting in a privilege escalation running code as administrator of the very same Windows PC. A successful attack depends on various preconditions beyond the attackers control.
Ссылки
- Permissions Required
- Vendor Advisory
- Permissions Required
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:sap:sapsetup:9.0:*:*:*:*:*:*:*
EPSS
Процентиль: 17%
0.00055
Низкий
6.7 Medium
CVSS3
Дефекты
CWE-427
Связанные уязвимости
CVSS3: 7.3
github
больше 2 лет назад
A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup (Software Installation Program) - version 9.0, resulting in a privilege escalation running code as administrator of the very same Windows PC. A successful attack depends on various preconditions beyond the attackers control.
EPSS
Процентиль: 17%
0.00055
Низкий
6.7 Medium
CVSS3
Дефекты
CWE-427