1 results (0.003 seconds)

CVSS: 9.4EPSS: 0%CPEs: 15EXPL: 0

09 May 2023 — SAP GUI for Windows - version 7.70, 8.0, allows an unauthorized attacker to gain NTLM authentication information of a victim by tricking it into clicking a prepared shortcut file. Depending on the authorizations of the victim, the attacker can read and modify potentially sensitive information after successful exploitation. • https://launchpad.support.sap.com/#/notes/3320467 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •