Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cf98-qgqh-wq9x

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 2.4

Описание

Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to the entire configuration, but no system sensitive information can be gained.

Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to the entire configuration, but no system sensitive information can be gained.

EPSS

Процентиль: 91%
0.06135
Низкий

2.4 Low

CVSS3

Дефекты

CWE-311

Связанные уязвимости

CVSS3: 2.4
nvd
больше 6 лет назад

Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to the entire configuration, but no system sensitive information can be gained.

CVSS3: 2.4
fstec
больше 6 лет назад

Уязвимость платформы управления программными средами SAP Solution Manager, связанная с недостатками управления регистрационными данными, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 91%
0.06135
Низкий

2.4 Low

CVSS3

Дефекты

CWE-311