Medium 4.4

SAP Start Service and SAP Management Console store sensitive credential information in process...

CVE-2026-89115 First seen on SecPulse Nov 10, 09:19

Original description The description as published by the source.

SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This results in a high impact on confidentiality and no impact on integrity and availability.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 4.4; CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Published: Nov 10, 2026
First seen on SecPulse: Nov 10, 09:19
GHSA: GHSA-f3g3-hq78-qv6j
CWE: CWE-256

NVD GitHub Advisory

Tags(click for explanation)

All

CWE-256 Sap Se Sap Start Service And Sap Microsoft Management Console

Detection sources

NIST National Vulnerability Database07:11
GitHub Security Advisories (Global)Nov 10, 12:30
CVE.org (CVE Program・cvelistV5)Nov 10, 09:19