mirror of
https://github.com/0xMarcio/cve.git
synced 2026-03-26 12:20:24 +01:00
747 B
747 B
CVE-2015-3449
Description
The Windows client in SAP Afaria 7.0.6398.0 uses weak permissions (Everyone: read and Everyone: write) for the install folder, which allows local users to gain privileges via a Trojan horse XeService.exe file.
POC
Reference
Github
No PoCs found on GitHub currently.