Lucene search

K
nvd[email protected]NVD:CVE-2021-21448
HistoryJan 12, 2021 - 3:15 p.m.

CVE-2021-21448

2021-01-1215:15:14
web.nvd.nist.gov
4
sap gui
windows
local attacker
spoof logon
restricted info
user authorization

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0

Percentile

12.6%

SAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for Application Server ABAP backend systems in the client PCs memory. Under certain conditions the attacker can access information which would otherwise be restricted. The exploit can only be executed locally on the client PC and not via Network and the attacker needs at least user authorization of the Operating System user of the victim.

Affected configurations

Nvd
Node
sapgraphical_user_interfaceMatch7.60windows
VendorProductVersionCPE
sapgraphical_user_interface7.60cpe:2.3:a:sap:graphical_user_interface:7.60:*:*:*:*:windows:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0

Percentile

12.6%

Related for NVD:CVE-2021-21448