Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
DLL Hijacking vulnerability in SAP Product Lifecycle Costing
Vulnerability Description
SAP Product Lifecycle Costing Client (versions below 4.7.1) application loads on demand a DLL that is available with Windows OS. This DLL is loaded from the computer running SAP Product Lifecycle Costing Client application. That particular DLL could be replaced by a malicious one, that could execute commands as being part of SAP Product Lifecycle Costing Client Application. On a successful attack, it can cause a low impact to confidentiality but no impact to the integrity and availability of the application.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
对搜索路径元素未加控制
Vulnerability Title
SAP Lifecycle Costing Client 代码问题漏洞
Vulnerability Description
SAP Lifecycle Costing Client是德国思爱普（SAP）公司的一款产品生命周期成本核算软件。 SAP Lifecycle Costing Client 4.7.1之前版本存在代码问题漏洞，该漏洞源于存在DLL替换漏洞，导致会窃取应用程序处理的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A