Description (CNA)
Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a company. This leads to high impact on confidentiality, integrity and availability of the Windows server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAPSetup | affected LMSAPSETUP 9.0 |
CWE
CWE-427
References
ADP enrichment
No English description supplied.
No references supplied.