CVE-2022-39801
CVE-2022-39801
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
13 Sep 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed in Firefighter Logon Pad. This attack can be launched only within the firewall. On successful exploitation the attacker can gain access to admin session and completely compromise the application.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
SAP SE · SAP GRC Access Control Emergency Access ManagementWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →