Vulnerability · Published Jan 10, 2023 · Assigned by sap
CVE-2023-0012Local Privilege Escalation in SAP Host Agent (Windows)
Medium 6.4
In plain English
A medium-severity improper access control in Host Agent (Windows) from SAP. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Official description
In SAP Host Agent (Windows) - versions 7.21, 7.22, an attacker who gains local membership to SAP_LocalAdmin could be able to replace executables with a malicious file that will be started under a privileged account. Note that by default all user members of SAP_LocaAdmin are denied the ability to logon locally by security policy so that this can only occur if the system has already been compromised.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SAP | Host Agent (Windows) | 7.217.22 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H