SAP GUI for Windows - version 7.70, 8.0, allows an unauthorized attacker to gain NTLM authentication information of a victim by tricking it into clicking a prepared shortcut file. Depending on the authorizations of the victim, the attacker can read and modify potentially sensitive information after successful exploitation.
2023-05-09T02:15:12.873
2024-11-21T08:02:44.100
Modified
CVSSv3.1: 7.5 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | sap | gui_for_windows | < 7.70 | Yes |
| Application | sap | gui_for_windows | 7.70 | Yes |
| Application | sap | gui_for_windows | 7.70 | Yes |
| Application | sap | gui_for_windows | 7.70 | Yes |
| Application | sap | gui_for_windows | 7.70 | Yes |
| Application | sap | gui_for_windows | 7.70 | Yes |
| Application | sap | gui_for_windows | 7.70 | Yes |
| Application | sap | gui_for_windows | 7.70 | Yes |
| Application | sap | gui_for_windows | 7.70 | Yes |
| Application | sap | gui_for_windows | 7.70 | Yes |
| Application | sap | gui_for_windows | 7.70 | Yes |
| Application | sap | gui_for_windows | 7.70 | Yes |
| Application | sap | gui_for_windows | 7.70 | Yes |
| Application | sap | gui_for_windows | 8.0 | Yes |
| Application | sap | gui_for_windows | 8.0 | Yes |