Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-97gq-4jqf-cvgm

Опубликовано: 08 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The ACL (Access Control List) of SAP Message Server - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, RNL64UC 7.22, RNL64UC 7.22EXT, RNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, can be bypassed in certain conditions, which may enable an authenticated malicious user to enter the network of the SAP systems served by the attacked SAP Message server. This may lead to unauthorized read and write of data as well as rendering the system unavailable.

The ACL (Access Control List) of SAP Message Server - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, RNL64UC 7.22, RNL64UC 7.22EXT, RNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, can be bypassed in certain conditions, which may enable an authenticated malicious user to enter the network of the SAP systems served by the attacked SAP Message server. This may lead to unauthorized read and write of data as well as rendering the system unavailable.

EPSS

Процентиль: 13%
0.00042
Низкий

7.5 High

CVSS3

Дефекты

CWE-285
CWE-863

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

The ACL (Access Control List) of SAP Message Server - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, RNL64UC 7.22, RNL64UC 7.22EXT, RNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, can be bypassed in certain conditions, which may enable an authenticated malicious user to enter the network of the SAP systems served by the attacked SAP Message server. This may lead to unauthorized read and write of data as well as rendering the system unavailable.

CVSS3: 7.5
fstec
больше 2 лет назад

Уязвимость сервера сообщений SAP Message Server программной интеграционной платформы SAP NetWeaver AS ABAP, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных или вызвать отказ в обслуживании

EPSS

Процентиль: 13%
0.00042
Низкий

7.5 High

CVSS3

Дефекты

CWE-285
CWE-863