Description
SAP GUI for Windows allows an unauthenticated attacker to exploit insecure obfuscation algorithms used by the GuiXT application to store user credentials. While this issue does not impact the Integrity or Availability of the application, it may have a Low impact on the Confidentiality of data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP GUI for Windows | BC-FES-GUI 8.00 | — |
Advisories 2
- WID-SEC-2025-1002 SAP Patchday Mai 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 13, 2025
- NCSC-2025-0149 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · May 13, 2025