CVE-2015-3621

CVE-2015-3621 describes an untrusted search path vulnerability in SAP Enterprise Central Component (ECC) that enables local privilege escalation via a Trojan horse program. The NVD entry summarizes that untrusted search paths allow local users to gain privileges, with a high severity (CVSS v2 bas...