Описание
A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the system.
Ссылки
- Permissions Required
- Vendor Advisory
- Permissions Required
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:sap:customer_relationship_management:700:*:*:*:*:*:*:*
cpe:2.3:a:sap:customer_relationship_management:701:*:*:*:*:*:*:*
cpe:2.3:a:sap:customer_relationship_management:702:*:*:*:*:*:*:*
cpe:2.3:a:sap:customer_relationship_management:712:*:*:*:*:*:*:*
cpe:2.3:a:sap:customer_relationship_management:713:*:*:*:*:*:*:*
cpe:2.3:a:sap:customer_relationship_management:714:*:*:*:*:*:*:*
EPSS
Процентиль: 47%
0.00237
Низкий
6.8 Medium
CVSS3
7.2 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-862
Связанные уязвимости
github
больше 3 лет назад
A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the system.
EPSS
Процентиль: 47%
0.00237
Низкий
6.8 Medium
CVSS3
7.2 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-862