When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP Business Client versions - 7.0, 7.70, will allow him to read extremely sensitive data, such as credentials. This would allow the attacker to compromise the corresponding backend for which the credentials are valid.
References
| Link | Resource |
|---|---|
| https://launchpad.support.sap.com/#/notes/3060621 | Permissions Required |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 | Vendor Advisory |
| https://launchpad.support.sap.com/#/notes/3060621 | Permissions Required |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
27 May 2025, 16:49
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:sap:business_client:7.0:*:*:*:*:*:*:* |
cpe:2.3:a:sap:business_client:6.5:patch_level14:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level17:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level15:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level16:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level19:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level4:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level9:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level12:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level2:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level5:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.70:patch_level2:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level20:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level11:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:-:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level13:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level10:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level4:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level13:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level18:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level22:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level10:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level8:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level6:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level7:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level18:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level1:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level9:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level7:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level9:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level20:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level14:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level1:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level2:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level6:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level15:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level16:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level17:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level3:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.70:patch_level4:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level5:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level2:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.70:patch_level1:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level10:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level4:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level11:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level12:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level13:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level12:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level17:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level14:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.70:patch_level5:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level3:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level11:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:-:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:-:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level16:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level8:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level19:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level3:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level21:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level8:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level1:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.0:patch_level7:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level6:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.70:-:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.0:patch_level5:*:*:*:*:*:* cpe:2.3:a:sap:business_client:6.5:patch_level15:*:*:*:*:*:* cpe:2.3:a:sap:business_client:7.70:patch_level3:*:*:*:*:*:* |
21 Nov 2024, 06:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://launchpad.support.sap.com/#/notes/3060621 - Permissions Required | |
| References | () https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 - Vendor Advisory |
Information
Published : 2021-09-14 12:15
Updated : 2025-05-27 16:49
NVD link : CVE-2021-38150
Mitre link : CVE-2021-38150
CVE.ORG link : CVE-2021-38150
JSON object : View
Products Affected
sap
- business_client
CWE
CWE-312
Cleartext Storage of Sensitive Information