Unscored CVE-2016-3946 EUVD-2016-4958GHSA-73xf-52j8-9h74

SAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Secu…

Published Oct 13, 2016 · Updated Aug 6, 2024 · Assigned by mitre

Description

SAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461.

References

20161011 Onapsis Security Advisory ONAPSIS-2016-001: SAP console insecure password storage mailing-list
93509 vdb-entry
https://www.onapsis.com/research/security-advisories/sap-console-insecure-password-storage