CVEvulnerability

CVE-2025-24870

6.0 MEDIUM Published 2025-02-11 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-02-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-921

Description

SAP GUI for Windows & RFC service credentials are incorrectly stored in the memory of the program allowing an unauthenticated attacker to access information within systems, resulting in privilege escalation. On successful exploitation, this could result in disclosure of highly sensitive information. This has no impact on integrity, and availability.

Related

Weakness · CWE (1)

  • CWE-921 Storage of Sensitive Data in a Mechanism without Access Control weakness

Referenced by CWE · observed example (1)

  • CWE-316 Cleartext Storage of Sensitive Information in Memory weakness

References