VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Sep 14, 2021· Updated Jun 17, 2026

CVE-2021-38150

CVE-2021-38150

Description

When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP Business Client versions - 7.0, 7.70, will allow him to read extremely sensitive data, such as credentials. This would allow the attacker to compromise the corresponding backend for which the credentials are valid.

Affected products

70
  • SAP/Business Client69 versions
    cpe:2.3:a:sap:business_client:6.0:-:*:*:*:*:*:*+ 68 more
    • cpe:2.3:a:sap:business_client:6.0:-:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level10:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level11:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level12:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level13:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level14:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level15:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level16:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level17:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level1:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level2:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level3:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level4:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level5:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level6:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level7:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level8:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.0:patch_level9:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:-:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level10:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level11:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level12:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level13:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level14:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level15:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level16:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level17:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level18:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level19:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level1:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level20:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level21:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level22:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level2:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level3:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level4:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level5:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level6:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level7:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level8:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:6.5:patch_level9:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:-:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level10:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level11:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level12:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level13:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level14:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level15:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level16:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level17:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level18:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level19:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level1:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level20:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level2:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level3:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level4:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level5:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level6:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level7:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level8:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.0:patch_level9:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.70:-:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.70:patch_level1:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.70:patch_level2:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.70:patch_level3:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.70:patch_level4:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_client:7.70:patch_level5:*:*:*:*:*:*
    • (no CPE)
  • SAP SE/SAP Business Clientv5
    Range: < 7.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.