Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-38150 EUVD-2021-24622GHSA-5qm4-cm2h-3cgf

When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP…

Published Sep 14, 2021 · Updated Aug 4, 2024 · Assigned by sap

Description

When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP Business Client versions - 7.0, 7.70, will allow him to read extremely sensitive data, such as credentials. This would allow the attacker to compromise the corresponding backend for which the credentials are valid.

Affected products

VendorProductAffectedFixed
SAP SE SAP Business Client < 7.0, < 7.70 —

References