PT-2024-10482 · Sap · Sap Gui For Windows

Published 2024-05-12 · Updated 2025-07-02 · CVE-2025-0055

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP GUI for Windows (affected versions not specified)

Description The issue concerns the storage of user input on the client PC to improve usability. Under specific circumstances, an attacker with administrative privileges or access to the victim's user directory on the Operating System level could read this data. The disclosed data could range from non-critical to highly sensitive, causing a high impact on the confidentiality of the application. The vulnerability is related to the disclosure of system data to unauthorized parties, which could allow an attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2025-01032

CVE-2025-0055

Affected Products

Sap Gui For Windows

References · 12

• https://bdu.fstec.ru/vul/2025-01032 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-0055 · Security Note
• https://t.me/true_secator/7191 · Telegram Post
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/january-2025.html · Note
• https://twitter.com/TweetThreatNews/status/1937912841190641907 · Twitter Post
• https://twitter.com/cybrhoodsentinl/status/1937923214501650485 · Twitter Post
• https://twitter.com/tony3266/status/1937870463214182482 · Twitter Post
• https://twitter.com/jbhall56/status/1938208863540367520 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1879121365686448296 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/1878988111494918151 · Twitter Post
• https://me.sap.com/notes/3472837 · Note