CVE-2025-0056: Information Disclosure vulnerability in SAP GUI for Java
SAP GUI for Java saves user input on the client PC to improve usability. An attacker with administrative privileges or access to the victim�s user directory on the Operating System level would be able to read this data. Depending on the user input provided in transactions, the disclosed data could range from non-critical data to highly sensitive data, causing high impact on confidentiality of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0056?
CVE-2025-0056 has a moderate severity level due to the potential for unauthorized data access.
How do I mitigate CVE-2025-0056?
To mitigate CVE-2025-0056, ensure that proper access controls are implemented to restrict access to user directories.
What software is affected by CVE-2025-0056?
CVE-2025-0056 specifically affects the SAP GUI for Java.
Can user data be leaked due to CVE-2025-0056?
Yes, CVE-2025-0056 allows attackers with access to the user directory to potentially read sensitive user input.
What precautions should be taken to prevent CVE-2025-0056 exploitation?
To prevent exploitation of CVE-2025-0056, regularly review and tighten user permissions and monitor access logs.