Логотип exploitDog
bind:CVE-2023-24526
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-24526

Количество 2

Количество 2

nvd логотип

CVE-2023-24526

почти 3 года назад

SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an unassigned user can read non-sensitive server data.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-gv3m-g54h-56c6

почти 3 года назад

SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an unassigned user can read non-sensitive server data.

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-24526

SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an unassigned user can read non-sensitive server data.

CVSS3: 5.3
0%
Низкий
почти 3 года назад
github логотип
GHSA-gv3m-g54h-56c6

SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an unassigned user can read non-sensitive server data.

CVSS3: 5.3
0%
Низкий
почти 3 года назад

Уязвимостей на страницу