CVE-2023-0023
Information Disclosure in SAP Bank Account Management (Manage Banks)
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.5EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
10 Jan 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Affected products
SAP · Bank Account Management (Manage Banks)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →