Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-27500

Опубликовано: 14 мар. 2023
Источник: nvd
CVSS3: 9.6
CVSS3: 8.1
EPSS Низкий

Описание

An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files. In this attack, no data can be read but potentially critical OS files can be over-written making the system unavailable.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*

EPSS

Процентиль: 63%
0.00455
Низкий

9.6 Critical

CVSS3

8.1 High

CVSS3

Дефекты

CWE-22
CWE-22

Связанные уязвимости

CVSS3: 8.1
github
почти 3 года назад

An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files. In this attack, no data can be read but potentially critical OS files can be over-written making the system unavailable.

CVSS3: 9.6
fstec
почти 3 года назад

Уязвимость компонента SAPRSBRO программных интеграционных платформ SAP NetWeaver AS ABAP и SAP NetWeaver ABAP, позволяющая нарушителю перезаписывать произвольные файлы

EPSS

Процентиль: 63%
0.00455
Низкий

9.6 Critical

CVSS3

8.1 High

CVSS3

Дефекты

CWE-22
CWE-22