SAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for Application Server ABAP backend systems in the client PCs memory. Under certain conditions the attacker can access information which would otherwise be restricted. The exploit can only be executed locally on the client PC and not via Network and the attacker needs at least user authorization of the Operating System user of the victim.
References
| Link | Resource |
|---|---|
| https://launchpad.support.sap.com/#/notes/2992269 | Permissions Required |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476 | Vendor Advisory |
Configurations
History
12 Jul 2022, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo |
24 Feb 2021, 20:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://launchpad.support.sap.com/#/notes/2992269 - Permissions Required |
11 Feb 2021, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
14 Jan 2021, 15:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:sap:graphical_user_interface:7.60:*:*:*:*:windows:*:* | |
| CWE | CWE-522 | |
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 6.5 |
| References | (MISC) https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476 - Vendor Advisory | |
| References | (MISC) https://i7p.wdf.sap.corp/sap/support/notes/2992269 - Broken Link |
12 Jan 2021, 15:38
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-01-12 15:15
Updated : 2023-12-10 13:41
NVD link : CVE-2021-21448
Mitre link : CVE-2021-21448
CVE.ORG link : CVE-2021-21448
JSON object : View
Products Affected
sap
- graphical_user_interface
CWE