CVE-2024-22125 Information Disclosure vulnerability in Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)
An attacker can access highly sensitive restricted information via the SAP GUI connector extension for Microsoft Edge, compromising confidentiality.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-22125?
CVE-2024-22125 is a high-severity vulnerability in SAP_SE Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge), published on 9 Jan 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Under certain conditions the Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge) - version 1.0, allows an attacker to access highly sensitive information which would otherwise be restricted causing high impact on confidentiality.
Weakness: CWE-497
Which versions are affected by CVE-2024-22125?
It affects 1 product.
Products include Sap Gui Connector.
How do I fix CVE-2024-22125?
No fix has been published for CVE-2024-22125 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-22125 being exploited?
There is no known exploitation of CVE-2024-22125 in the wild and no public exploit code.
Sources
Also known as GHSA-8hc8-mhjh-c5rj.