MEDIUM🇬🇧 English

CVE-2023-37484

CVSS 5.3v3.1pub. 2023-08-08upd. 2024-11-21

SAP PowerDesigner - version 16.7, queries all password hashes in the backend database and compares it with the user provided one during login attempt, which might allow an attacker to access password hashes from the client's memory.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

  • Sap Powerdesigner

    APP
    Sap
    16.7
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2023-37483CRITICAL9.8ten sam produkt

SAP PowerDesigner - version 16.7, has improper access control which might allow an unauthenticated attacker to...

CVE-2023-36923HIGH7.8ten sam produkt

SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local acc...

CVE-2023-40310MEDIUM6.5ten sam produkt

SAP PowerDesigner Client - version 16.7, does not sufficiently validate BPMN2 XML document imported from an un...

CVE-2023-40621MEDIUM6.3ten sam produkt

SAP PowerDesigner Client - version 16.7, allows an unauthenticated attacker to inject VBScript code in a docum...

CVE-2025-42999CRITICAL9.1⚠ KEVPL ✓ten sam vendor

SAP NetWeaver Visual Composer — niebezpieczna deserializacja treści