CVE-2011-5154

Severity Score

6.9

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple untrusted search path vulnerabilities in (1) SAPGui.exe and (2) BExAnalyzer.exe in SAP GUI 6.4 through 7.2 allow local users to gain privileges via a Trojan horse MFC80LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .sap file. NOTE: some of these details are obtained from third party information.

Múltiples vulnerabilidades de ruta de búsqueda no confiable en (1) SAPGui.exe y (2) BExAnalyzer.exe en SAP GUI v6.4 hasta v7.2, permite a usuarios locales ganar privilegios a través de un archivo MFC80LOC.DLL caballo de troya que se encuentre en el mismo directorio de trabajo, como se demostró con un directorio que contiene un archivo .sap. NOTA: algunos de estos detalles han sido obtenidos de fuentes de información de terceros

*Credits: N/A

CVSS Scores

NISTv2 6.9

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-09-06 CVE Reserved
2012-09-06 CVE Published
2024-02-02 EPSS Updated
2024-09-16 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (4)

URL	Tag	Source
http://dsecrg.com/pages/vul/show.php?id=314	X_refsource_misc
http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a	X_refsource_misc
https://service.sap.com/sap/support/notes/1511179	X_refsource_misc

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/43707	2021-01-15

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Sap Search vendor "Sap"		Graphical User Interface Search vendor "Sap" for product "Graphical User Interface"				6.4 Search vendor "Sap" for product "Graphical User Interface" and version "6.4"		-		Affected
Sap Search vendor "Sap"		Graphical User Interface Search vendor "Sap" for product "Graphical User Interface"				7.2 Search vendor "Sap" for product "Graphical User Interface" and version "7.2"		-		Affected