CVE-2025-24870

creationtimestamp| type| source ---|---|--- 2025-02-11 01:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuid2r7ew2v 2025-02-11 01:26:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113982647746256616 2025-02-11 03:07:44+00:00| seen|...

CVE-2025-24870

SAP GUI for Windows & RFC service credentials are incorrectly stored in the memory of the program allowing an unauthenticated attacker to access information within systems, resulting in privilege escalation. On successful exploitation, this could result in disclosure of highly sensitive...

CVE-2025-24870 Insecure Key & Secret Management vulnerability in SAP GUI for Windows

SAP GUI for Windows & RFC service credentials are incorrectly stored in the memory of the program allowing an unauthenticated attacker to access information within systems, resulting in privilege escalation. On successful exploitation, this could result in disclosure of highly sensitive...

CVE-2025-24870

CVE-2025-24870 affects SAP GUI for Windows (and RFC service) where credentials are stored in the process memory. This can allow an unauthenticated (local) attacker to access sensitive information and cause privilege escalation, with confidentiality impact but no reported integrity/availability im...