CVE-2025-42943 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths. For a successful attack, the attacker need…
Medium CVSS: 4.5

CVE-2025-42943

SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths. For a successful attack, the attacker needs developer authorization in a specific Application Server ABAP to make changes in the code, and the victim needs to execute by using SAP GUI for Windows. This could trigger automatic NTLM authentication, potentially exposing hashed credentials to an attacker. As a result, it has a high impact on the confidentiality.
Vendor
-
Product
-
CWE
CWE-250
Yayın Tarihi
2025-08-12 03:15:26
Güncelleme
2025-08-12 14:25:33
Source Identifier
cna@sap.com
KEV Date Added
-

Kategoriler

Referanslar