Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c6hc-8mm4-9853

Опубликовано: 10 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

Due to a Missing Authorization Check in SAP Business Warehouse (Service API), an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request processing and causing denial of service. This results in low impact on integrity and high impact on availability, while confidentiality remains unaffected.

Due to a Missing Authorization Check in SAP Business Warehouse (Service API), an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request processing and causing denial of service. This results in low impact on integrity and high impact on availability, while confidentiality remains unaffected.

EPSS

Процентиль: 12%
0.00215
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.9
nvd
6 месяцев назад

Due to a Missing Authorization Check in SAP Business Warehouse (Service API), an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request processing and causing denial of service. This results in low impact on integrity and high impact on availability, while confidentiality remains unaffected.

EPSS

Процентиль: 12%
0.00215
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-862