CVE-2024-47595CWE-266

Local Privilege Escalation in SAP Host Agent

Medium · published November 12, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentiality and integrity of the application.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2024-11-12T00:27Z
EPSS history
Timeline
  • 12 NOV 00:27Z
    Local Privilege Escalation in SAP Host Agent
    cvelistv5