Описание
SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys under certain conditions in the PGP Module of Business-to-Business Add-On, these keys can then be used to read messages processed by the module leading to Information Disclosure.
Ссылки
- Permissions Required
- Vendor Advisory
- Permissions Required
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:sap:process_integration_\(pgp_module_-_business-to-business_add_on\):1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 47%
0.00238
Низкий
4.9 Medium
CVSS3
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
github
больше 3 лет назад
SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys under certain conditions in the PGP Module of Business-to-Business Add-On, these keys can then be used to read messages processed by the module leading to Information Disclosure.
EPSS
Процентиль: 47%
0.00238
Низкий
4.9 Medium
CVSS3
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
NVD-CWE-noinfo