PT-2025-28294 · Guixt · Guixt

Published 2025-07-08 · Updated 2025-07-08 · CVE-2025-42979

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: GuiXT (affected versions not specified)

Description: The issue concerns the use of obfuscation algorithms instead of secure symmetric ciphers for storing RFC user credentials on the client PC. This leads to a high impact on confidentiality, as an attacker gaining access to the user hive of the Windows registry could recreate the original password. There is no impact on the integrity or availability of the application.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

BDU:2025-16215

CVE-2025-42979

Affected Products

Guixt

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-42979 · Security Note
• https://bdu.fstec.ru/vul/2025-16215 · Security Note
• https://me.sap.com/notes/3607513 · Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2025.html · Note
• https://twitter.com/CVEnew/status/1942418285569380711 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note