Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-32113

Information Disclosure vulnerability in SAP GUI for Windows

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP GUI for Windows - version 7.70, 8.0, allows an unauthorized attacker to gain NTLM authentication information of a victim by tricking it into clicking a prepared shortcut file. Depending on the authorizations of the victim, the attacker can read and modify potentially sensitive information after successful exploitation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP GUI for Windows

Default version status: unaffected

  • <= 7.70affected
  • 7.70 PL0 to ≤ 7.70 PL11affected
  • 8.00 PL0 to ≤ 8.00 PL1affected

References