Code injection

2016-10-1314:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

SAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461.

CPENameOperatorVersion
sapconsoleeq7.30

CPE	Name	Operator	Version
	sapconsole	eq	7.30

References

seclists.org/fulldisclosure/2016/Oct/31

www.securityfocus.com/bid/93509

www.onapsis.com/research/security-advisories/sap-console-insecure-password-storage