CVE-2024-22125 — Information Disclosure vulnerability in Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)

CVE-2024-22125

Information Disclosure vulnerability in Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge) PUBLISHED

Description (CNA)

Under certain conditions the Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge) - version 1.0, allows an attacker to access highly sensitive information which would otherwise be restricted causing high impact on confidentiality.

Affected (CNA)

Vendor / product	Versions
SAP_SE / Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)	affected 1.0

CWE

CWE-497

References

https://me.sap.com/notes/3386378
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

ADP enrichment

CVE

No English description supplied.

https://me.sap.com/notes/3386378
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

CISA-ADP

No English description supplied.

No references supplied.