Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-42979

Опубликовано: 08 июл. 2025
Источник: nvd
CVSS3: 5.6
EPSS Низкий

Описание

The GuiXT application, which is integrated with SAP GUI for Windows, uses obfuscation algorithms instead of secure symmetric ciphers for storing the credentials of an RFC user on the client PC. This leads to a high impact on confidentiality because any attacker who gains access to the user hive of this user�s windows registry could recreate the original password. There is no impact on integrity or availability of the application

EPSS

Процентиль: 2%
0.00014
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-922

Связанные уязвимости

CVSS3: 5.6
github
7 месяцев назад

The GuiXT application, which is integrated with SAP GUI for Windows, uses obfuscation algorithms instead of secure symmetric ciphers for storing the credentials of an RFC user on the client PC. This leads to a high impact on confidentiality because any attacker who gains access to the user hive of this user�s windows registry could recreate the original password. There is no impact on integrity or availability of the application

CVSS3: 5.6
fstec
7 месяцев назад

Уязвимость приложения GuiXT графического интерфейса пользователя SAP GUI для Windows, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 2%
0.00014
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-922