CVE-2025-0055
SAP GUI for Windows stores user input on the client PC to improve usability. Under very specific circumstances an attacker with administrative privileges or access to the victim�s user directory on the Operating System level would be able to read this data. Depending on the user input provided in transactions, the disclosed data could range from non-critical data to highly sensitive data, causing high impact on confidentiality of the application.
Vendor
-
Product
-
CWE
Yayın Tarihi
2025-01-14 01:15:15
Güncelleme
2025-01-14 01:15:15
Source Identifier
cna@sap.com
KEV Date Added
-