Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-37484

Information Disclosure Vulnerabilities in SAP PowerDesigner

Description

SAP PowerDesigner - version 16.7, queries all password hashes in the backend database and compares it with the user provided one during login attempt, which might allow an attacker to access password hashes from the client's memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP PowerDesigner

Default version status: unaffected

  • 16.7affected

References