Описание
In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authenticated user resulting in disclosure of system information.This has low impact on confidentiality. Integrity and availability are not impacted.
Ссылки
- Permissions Required
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:sap:solution_tools_plug-in:740:*:*:*:*:*:*:*
cpe:2.3:a:sap:solution_tools_plug-in:758:*:*:*:*:*:*:*
cpe:2.3:a:sap:solution_tools_plug-in:2005_1_700:*:*:*:*:*:*:*
cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710:*:*:*:*:*:*:*
EPSS
Процентиль: 6%
0.00168
Низкий
5 Medium
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 5
github
5 месяцев назад
In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authenticated user resulting in disclosure of system information.This has low impact on confidentiality. Integrity and availability are not impacted.
EPSS
Процентиль: 6%
0.00168
Низкий
5 Medium
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-862