Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-67fv-h3m9-7p8h

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information that would otherwise be restricted to highly privileged users because of missing authorization, resulting in Information Disclosure.

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information that would otherwise be restricted to highly privileged users because of missing authorization, resulting in Information Disclosure.

EPSS

Процентиль: 50%
0.00265
Низкий

8.8 High

CVSS3

Дефекты

CWE-200
CWE-862

Связанные уязвимости

CVSS3: 8.8
nvd
около 5 лет назад

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information that would otherwise be restricted to highly privileged users because of missing authorization, resulting in Information Disclosure.

EPSS

Процентиль: 50%
0.00265
Низкий

8.8 High

CVSS3

Дефекты

CWE-200
CWE-862