Описание
sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy, aka SAP Security Note 2407694.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:sap:hana_xs:1.00:*:*:*:*:*:*:*
cpe:2.3:a:sap:hana_xs:2.00:*:*:*:*:*:*:*
EPSS
Процентиль: 65%
0.00494
Низкий
8.3 High
CVSS3
7.5 High
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 8.3
github
больше 3 лет назад
sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy, aka SAP Security Note 2407694.
EPSS
Процентиль: 65%
0.00494
Низкий
8.3 High
CVSS3
7.5 High
CVSS2
Дефекты
NVD-CWE-noinfo