CVE-2024-47595 — Local Privilege Escalation in SAP Host Agent

CVE-2024-47595

Local Privilege Escalation in SAP Host Agent PUBLISHED

Description (CNA)

An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentiality and integrity of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Host Agent	affected SAPHOSTAGENT 7.22

CWE

CWE-266

References

https://me.sap.com/notes/3509619
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.