CVE-2021-38150

sap business client

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-38150

Katalog CVE

CVSS 6.5 · Medium EPSS 0,52%

Kerentanan Cleartext Storage of Sensitive Information pada sap business client. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP Business Client versions - 7.0, 7.70, will allow him to read extremely sensitive data, such as credentials. This would allow the attacker to compromise the corresponding backend for which the credentials are valid.

Rincian

Terbit di NVD
14 September 2021
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-312: Cleartext Storage of Sensitive Information
EPSS (30 hari)
0,52% peluang dieksploitasi; lebih tinggi dari 42,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
sap business client Versi 6.0
sap business client Versi 6.0 patch_level1
sap business client Versi 6.0 patch_level10
sap business client Versi 6.0 patch_level11
sap business client Versi 6.0 patch_level12
sap business client Versi 6.0 patch_level13
sap business client Versi 6.0 patch_level14
sap business client Versi 6.0 patch_level15
sap business client Versi 6.0 patch_level16
sap business client Versi 6.0 patch_level17
sap business client Versi 6.0 patch_level2
sap business client Versi 6.0 patch_level3
sap business client Versi 6.0 patch_level4
sap business client Versi 6.0 patch_level5
sap business client Versi 6.0 patch_level6
sap business client Versi 6.0 patch_level7
sap business client Versi 6.0 patch_level8
sap business client Versi 6.0 patch_level9
sap business client Versi 6.5
sap business client Versi 6.5 patch_level1
sap business client Versi 6.5 patch_level10
sap business client Versi 6.5 patch_level11
sap business client Versi 6.5 patch_level12
sap business client Versi 6.5 patch_level13
sap business client Versi 6.5 patch_level14
sap business client Versi 6.5 patch_level15
sap business client Versi 6.5 patch_level16
sap business client Versi 6.5 patch_level17
sap business client Versi 6.5 patch_level18
sap business client Versi 6.5 patch_level19
sap business client Versi 6.5 patch_level2
sap business client Versi 6.5 patch_level20
sap business client Versi 6.5 patch_level21
sap business client Versi 6.5 patch_level22
sap business client Versi 6.5 patch_level3
sap business client Versi 6.5 patch_level4
sap business client Versi 6.5 patch_level5
sap business client Versi 6.5 patch_level6
sap business client Versi 6.5 patch_level7
sap business client Versi 6.5 patch_level8
sap business client Versi 6.5 patch_level9
sap business client Versi 7.0
sap business client Versi 7.0 patch_level1
sap business client Versi 7.0 patch_level10
sap business client Versi 7.0 patch_level11
sap business client Versi 7.0 patch_level12
sap business client Versi 7.0 patch_level13
sap business client Versi 7.0 patch_level14
sap business client Versi 7.0 patch_level15
sap business client Versi 7.0 patch_level16
sap business client Versi 7.0 patch_level17
sap business client Versi 7.0 patch_level18
sap business client Versi 7.0 patch_level19
sap business client Versi 7.0 patch_level2
sap business client Versi 7.0 patch_level20
sap business client Versi 7.0 patch_level3
sap business client Versi 7.0 patch_level4
sap business client Versi 7.0 patch_level5
sap business client Versi 7.0 patch_level6
sap business client Versi 7.0 patch_level7

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 68 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.