Description (CNA)
SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP Host Agent | affected < 7.21 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
- https://launchpad.support.sap.com/#/notes/2902645
- http://seclists.org/fulldisclosure/2021/Apr/5
- http://packetstormsecurity.com/files/162084/SAP-Host-Control-Local-Privilege-Escalation.html
ADP enrichment
No English description supplied.