PT-2016-5771 · Sap · Sap Console

Nahuel D. Sánchez · Published 2016-10-13 · Updated 2016-11-28 · CVE-2016-3946

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP Console (aka SAPConsole) version 7.30

Description The issue allows local users to discover SAP Server login credentials by reading the Windows registry.

Recommendations For SAP Console (aka SAPConsole) version 7.30, update to a version that addresses this issue, as the current version allows unauthorized access to sensitive information.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

CWE-255

Related Identifiers

CVE-2016-3946

Affected Products

Sap Console

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-3946 · Security Note
• https://osv.dev/vulnerability/CVE-2016-3946 · Vendor Advisory
• http://seclists.org/fulldisclosure/2016/Oct/31 · Note
• http://securityfocus.com/bid/93509 · Note
• https://onapsis.com/research/security-advisories/sap-console-insecure-password-storage · Note