PT-2021-17547 · Sap · Sap Gui For Windows

Published 2021-05-11 · Updated 2021-06-29 · CVE-2021-27612

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SAP GUI for Windows versions prior to 7.60 PL10 SAP GUI for Windows versions prior to 7.70 PL1

Description The issue allows SAP GUI for Windows to forward a user to a specific malicious website, which could contain malware or lead to phishing attacks aimed at stealing the victim's credentials.

Recommendations For SAP GUI for Windows versions prior to 7.60 PL10, update to version 7.60 PL10 or later. For SAP GUI for Windows versions prior to 7.70 PL1, update to version 7.70 PL1 or later.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2021-27612

Affected Products

Sap Gui For Windows

References · 6

• https://launchpad.support.sap.com/#/notes/3023078 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27612 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27612 · Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655 · Vendor Advisory
• https://t.me/cvenotify/16816 · Telegram Post
• https://t.me/cvenotify/16060 · Telegram Post