Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gv3m-g54h-56c6

Опубликовано: 14 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an unassigned user can read non-sensitive server data.

SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an unassigned user can read non-sensitive server data.

EPSS

Процентиль: 55%
0.00331
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 5.3
nvd
почти 3 года назад

SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an unassigned user can read non-sensitive server data.

EPSS

Процентиль: 55%
0.00331
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-306