7.8

CVE-2021-40503

An information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7.70 PL4, which allows an attacker with sufficient privileges on the local client-side PC to obtain an equivalent of the user’s password. With this highly sensitive data leaked, the attacker would be able to logon to the backend system the SAP GUI for Windows was connected to and launch further attacks depending on the authorizations of the user.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Gui For Windows Version < 7.60
SAP ≫ Gui For Windows Version 7.60 Update -
SAP ≫ Gui For Windows Version 7.60 Update patch_level1
SAP ≫ Gui For Windows Version 7.60 Update patch_level10
SAP ≫ Gui For Windows Version 7.60 Update patch_level11
SAP ≫ Gui For Windows Version 7.60 Update patch_level12
SAP ≫ Gui For Windows Version 7.60 Update patch_level2
SAP ≫ Gui For Windows Version 7.60 Update patch_level3
SAP ≫ Gui For Windows Version 7.60 Update patch_level4
SAP ≫ Gui For Windows Version 7.60 Update patch_level5
SAP ≫ Gui For Windows Version 7.60 Update patch_level6
SAP ≫ Gui For Windows Version 7.60 Update patch_level7
SAP ≫ Gui For Windows Version 7.60 Update patch_level8
SAP ≫ Gui For Windows Version 7.60 Update patch_level8_hotfix1
SAP ≫ Gui For Windows Version 7.60 Update patch_level9
SAP ≫ Gui For Windows Version 7.70 Update -
SAP ≫ Gui For Windows Version 7.70 Update patch_level1
SAP ≫ Gui For Windows Version 7.70 Update patch_level2
SAP ≫ Gui For Windows Version 7.70 Update patch_level3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.12
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=589496864
Vendor Advisory
https://launchpad.support.sap.com/#/notes/3080106
Vendor Advisory
Permissions Required