CVE-2016-3946 SAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461.
HighCVSS 7.8
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sapconsole | = 7.30 | No fix listed |
References
- 20161011 Onapsis Security Advisory ONAPSIS-2016-001: SAP console insecure password storage mailing-list third-party-advisory
- 93509 vdb-entry
- www.onapsis.com permissions-required