The issue concerns weak permissions set for the install folder of the Windows client in SAP Afaria, allowing local users to escalate privileges. This can be achieved by exploiting the weak permissions (Everyone: read and Everyone: write) through a Trojan horse XeService.exe file.