CVE-2025-42979 Information

Jul 09, 2025 cve

Description

The GuiXT application which is integrated with SAP GUI for Windows uses obfuscation algorithms instead of secure symmetric ciphers for storing the credentials of an RFC user on the client PC. This leads to a high impact on confidentiality because any attacker who gains access to the user hive of this user?s windows registry could recreate the original password. There is no impact on integrity or availability of the application

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Reference

https://me.sap.com/notes/3607513 https://url.sap/sapsecuritypatchday https://url.sap/sapsecuritypatchday

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

CHANGED

Integrity Impact

HIGH

Availability Impact

NONE

Base Score

NONE

Base Severity

5.6

CNNVD-202507-814 (Published: 2025-07-08)

Share on: