Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f9xm-gx32-3xcw

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

SAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker with administrator privileges to access user sensitive data such as passwords in trace files, when the user logs in and sends request with login credentials, leading to Information Disclosure.

SAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker with administrator privileges to access user sensitive data such as passwords in trace files, when the user logs in and sends request with login credentials, leading to Information Disclosure.

EPSS

Процентиль: 51%
0.00285
Низкий

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.2
nvd
почти 6 лет назад

SAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker with administrator privileges to access user sensitive data such as passwords in trace files, when the user logs in and sends request with login credentials, leading to Information Disclosure.

EPSS

Процентиль: 51%
0.00285
Низкий

Дефекты

CWE-200