Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-86r4-6w98-w5h6

Опубликовано: 09 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to read a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the confidentiality of the application.

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to read a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the confidentiality of the application.

EPSS

Процентиль: 64%
0.00478
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 4.9
nvd
около 3 лет назад

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to read a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the confidentiality of the application.

EPSS

Процентиль: 64%
0.00478
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-22