CVE-2021-38150: Medium severity SAP Business Client vulnerability
When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP Business Client versions - 7.0, 7.70, will allow him to read extremely sensitive data, such as credentials. This would allow the attacker to compromise the corresponding backend for which the credentials are valid.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-38150?
CVE-2021-38150 is classified as a high severity vulnerability due to its potential to expose sensitive credentials.
How do I fix CVE-2021-38150?
To fix CVE-2021-38150, it is essential to apply the latest security patches provided by SAP for the affected versions.
What versions of SAP Business Client are affected by CVE-2021-38150?
CVE-2021-38150 affects SAP Business Client versions 7.0 and 7.70.
What type of attack exploits CVE-2021-38150?
CVE-2021-38150 can be exploited through local memory access, often facilitated by social engineering attacks.
What data can be compromised due to CVE-2021-38150?
CVE-2021-38150 can lead to the compromise of extremely sensitive data, including user credentials.