Skip to content
OpenAdvisories
Medium · 5.0 CVE-2024-39600 EUVD-2024-38120GHSA-g274-v7wr-8cmq

[CVE-2024-39600] Information Disclosure vulnerability in SAP GUI for Windows

Published Jul 9, 2024 · Updated Aug 2, 2024 · Assigned by sap

Description

Under certain conditions, the memory of SAP GUI
for Windows contains the password used to log on to an SAP system, which might
allow an attacker to get hold of the password and impersonate the affected
user. As a result, it has a high impact on the confidentiality but there is no
impact on the integrity and availability.

Affected products

VendorProductAffectedFixed
SAP_SE SAP GUI for Windows BC-FES-GUI 8 —

Advisories 1

References