Multiple SAP Products CVE-2019-0381 DLL Loading Local Privilege Escalation Vulnerability

Description

Multiple SAP Products are prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. The following SAP products are affected: SAP IQ version 16.1 is vulnerable SAP SQL Anywhere version 17.0 is vulnerable SAP Dynamic Tiering version 1.0 and 2.0 are vulnerable

Technologies Affected

• SAP Dynamic Tiering 1.0
• SAP Dynamic Tiering 2.0
• SAP IQ 16.1
• SAP SQL Anywhere 17.0

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Ensure that only trusted users have local, interactive access to affected computers.

Updates are available. Please see the references or vendor advisory for more information.