CVE-2024-47595CWE-266
Local Privilege Escalation in SAP Host Agent
Medium · published November 12, 2024
What it is
An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentiality and integrity of the application.
The record
Technical detail
- CVSS v3.1
- 6.3 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00147 · 3.6th percentile
- Weakness
- CWE-266 · Incorrect Privilege Assignment
- Published
- 2024-11-12T00:27Z
EPSS history
Timeline