Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r7v7-m4x6-4rxm

Опубликовано: 12 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner.

Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner.

EPSS

Процентиль: 31%
0.00121
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 4.3
nvd
почти 2 года назад

Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner.

EPSS

Процентиль: 31%
0.00121
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862