Information Disclosure Vulnerability in SAP GUI for Windows

CVE-2021-40503

What is CVE-2021-40503?

An information disclosure vulnerability exists in SAP GUI for Windows prior to the specified versions, which can allow a local attacker with sufficient privileges to gain access to sensitive user information, including the user's password. This exposure provides the attacker the ability to access the connected backend system, posing significant security risks depending on the user's authorization levels.

References