PT-2021-14516

CVE-2021-21448

·

Published

2021-01-12

·

Updated

2022-07-12

Description by

CVSS 3.1
6.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions SAP GUI for Windows version 7.60
Description The issue allows an attacker to spoof logon credentials for Application Server ABAP backend systems in the client PC's memory. Under certain conditions, the attacker can access information that would otherwise be restricted. The exploit can only be executed locally on the client PC and not via the network, and the attacker needs at least user authorization of the Operating System user of the victim.
Recommendations For SAP GUI for Windows version 7.60, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾