CVE-2023-32113: Information Disclosure vulnerability in SAP GUI for Windows
SAP GUI for Windows - version 7.70, 8.0, allows an unauthorized attacker to gain NTLM authentication information of a victim by tricking it into clicking a prepared shortcut file. Depending on the authorizations of the victim, the attacker can read and modify potentially sensitive information after successful exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-32113.
What is the severity of CVE-2023-32113?
The severity of CVE-2023-32113 is critical with a severity value of 9.3.
Which software versions are affected by CVE-2023-32113?
SAP GUI for Windows versions 7.70 and 8.0 are affected by CVE-2023-32113.
How can an attacker exploit CVE-2023-32113?
An attacker can exploit CVE-2023-32113 by tricking a victim into clicking a prepared shortcut file, allowing the attacker to gain NTLM authentication information.
Are there any references for CVE-2023-32113?
Yes, you can find references for CVE-2023-32113 at the following links: [Link 1](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html) and [Link 2](https://launchpad.support.sap.com/#/notes/3320467).