Credential Spoofing Vulnerability in SAP GUI for Windows by SAP

CVE-2021-21448

What is CVE-2021-21448?

The SAP GUI for Windows version 7.60 has a vulnerability that allows a local attacker to spoof logon credentials for Application Server ABAP backend systems. This occurs in the client PC's memory and can lead to unauthorized access to restricted information. The attacker needs to possess the operating system authorization of the victim, as the exploit cannot be executed over the network, highlighting the importance of local security measures.

References