SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This results in a high impact on confidentiality and no impact on integrity and availability.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Sap |
|
No data.
No data.
References
History
Tue, 10 Nov 2026 10:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Sap
Sap sap Start Service And Sap Microsoft Management Console |
|
| Vendors & Products |
Sap
Sap sap Start Service And Sap Microsoft Management Console |
Tue, 10 Nov 2026 00:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This results in a high impact on confidentiality and no impact on integrity and availability. | |
| Title | Information Disclosure vulnerability in SAP Start Service and SAP Microsoft Management Console | |
| Weaknesses | CWE-256 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: sap
Published: 2026-11-10T00:19:19.363Z
Updated: 2026-11-10T00:43:38.826Z
Reserved: 2026-09-10T22:25:18.638Z
Link: CVE-2026-89115
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-10T01:17:21.927
Modified: 2026-11-10T22:11:23.807
Link: CVE-2026-89115
Redhat
No data.