PT-2024-1086 · Sap · Sap Gui Connector For Microsoft Edge

Published 2024-01-08 · Updated 2024-08-31 · CVE-2024-22125

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP GUI connector for Microsoft Edge version 1.0

Description The issue allows an attacker to access highly sensitive information that would otherwise be restricted, causing a high impact on confidentiality. This is related to the disclosure of system data to an unauthorized area. Exploitation of the issue may allow a remote attacker to disclose protected information.

Recommendations For SAP GUI connector for Microsoft Edge version 1.0, consider disabling the extension until a patch is available to prevent an attacker from accessing sensitive information. Restrict access to sensitive data and areas of the system to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2024-00347

CVE-2024-22125

Affected Products

Sap Gui Connector For Microsoft Edge

References · 10

• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00347 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-22125 · Security Note
• https://osv.dev/vulnerability/CVE-2024-22125 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1744608294054850693 · Twitter Post
• https://twitter.com/transilienceai/status/1829581607180615974 · Twitter Post
• https://t.me/cvenotify/67300 · Telegram Post
• https://twitter.com/CVEnew/status/1744541351847362867 · Twitter Post
• https://me.sap.com/notes/3386378 · Note
• https://twitter.com/transilienceai/status/1830124610471211363 · Twitter Post