Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xqmc-v3x5-h7p2

Опубликовано: 12 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file path request parameter. The intended file path can be manipulated to allow arbitrary traversal of directories on the remote server. The file content within each directory can be read which may lead to information disclosure.

SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file path request parameter. The intended file path can be manipulated to allow arbitrary traversal of directories on the remote server. The file content within each directory can be read which may lead to information disclosure.

EPSS

Процентиль: 88%
0.03739
Низкий

7.5 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.5
nvd
больше 3 лет назад

SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file path request parameter. The intended file path can be manipulated to allow arbitrary traversal of directories on the remote server. The file content within each directory can be read which may lead to information disclosure.

CVSS3: 7.5
fstec
больше 3 лет назад

Уязвимость системы управления производством SAP Manufacturing Execution, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 88%
0.03739
Низкий

7.5 High

CVSS3

Дефекты

CWE-22