SAP GUI for Windows Privilege Escalation Vulnerability via Insecure Credential Storage

A vulnerability exists in SAP GUI for Windows, where RFC service credentials are improperly stored in the program's memory. This flaw allows an unauthenticated attacker to access sensitive information within systems, potentially leading to privilege escalation. The issue does not affect the integrity or availability of the system.

Impact

Exploitation of this vulnerability could result in the unauthorized disclosure of highly sensitive information, with the potential for privilege escalation.

Remediation

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP Security Patch Day, which occurs on the second Tuesday of each month. For more information, consult the SAP Security Notes FAQ or visit the SAP Security Community.