CVE-2015-3449

CVE-2015-3449 describes a privilege escalation vulnerability in the Windows client of SAP Afaria 7.0.6398.0. The flaw stems from weak permissions on the installation folder, allowing local users to replace the XeService.exe file with a malicious Trojan horse. With a CVSS score of 7.2, this vulnerability has a high severity, indicating that a local attacker can easily achieve complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.