Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8g4-mcwm-v999

Опубликовано: 10 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.6

Описание

The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms. Access to this data, combined with user?initiated interaction, may allow modifications to occur without validation. Such changes could affect system behaviour during startup, resulting in a high impact on the application's confidentiality and integrity, with a low impact on availability.

The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms. Access to this data, combined with user?initiated interaction, may allow modifications to occur without validation. Such changes could affect system behaviour during startup, resulting in a high impact on the application's confidentiality and integrity, with a low impact on availability.

EPSS

Процентиль: 0%
0.00087
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 5.6
nvd
5 месяцев назад

The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms. Access to this data, combined with user?initiated interaction, may allow modifications to occur without validation. Such changes could affect system behaviour during startup, resulting in a high impact on the application's confidentiality and integrity, with a low impact on availability.

CVSS3: 5.6
fstec
5 месяцев назад

Уязвимость программного обеспечения для розничной торговли, обеспечивающее управление точками продаж SAP Customer Checkout, связанная с хранением информации в открытом виде, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации

EPSS

Процентиль: 0%
0.00087
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-312