Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5rv7-gxg8-c93h

Опубликовано: 13 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.9

Описание

SAP Plant Connectivity - version 15.5 (PCo) or the Production Connector for SAP Digital Manufacturing - version 1.0, do not validate the signature of the JSON Web Token (JWT) in the HTTP request sent from SAP Digital Manufacturing. Therefore, unauthorized callers from the internal network could send service requests to PCo or the Production Connector, which could have an impact on the integrity of the integration with SAP Digital Manufacturing.

SAP Plant Connectivity - version 15.5 (PCo) or the Production Connector for SAP Digital Manufacturing - version 1.0, do not validate the signature of the JSON Web Token (JWT) in the HTTP request sent from SAP Digital Manufacturing. Therefore, unauthorized callers from the internal network could send service requests to PCo or the Production Connector, which could have an impact on the integrity of the integration with SAP Digital Manufacturing.

EPSS

Процентиль: 24%
0.00081
Низкий

7.9 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 7.9
nvd
больше 2 лет назад

SAP Plant Connectivity - version 15.5 (PCo) or the Production Connector for SAP Digital Manufacturing - version 1.0, do not validate the signature of the JSON Web Token (JWT) in the HTTP request sent from SAP Digital Manufacturing. Therefore, unauthorized callers from the internal network could send service requests to PCo or the Production Connector, which could have an impact on the integrity of the integration with SAP Digital Manufacturing.

CVSS3: 7.9
fstec
больше 2 лет назад

Уязвимость компонентов SAP Plant Connectivity и Production Connector программного обеспечения для управления производственными операциями и производственными процессами SAP Digital Manufacturing, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 24%
0.00081
Низкий

7.9 High

CVSS3

Дефекты

CWE-306