CVE-2023-40625
Missing Authorization check in SAP Manage Purchase Contracts App
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 5.4EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
12 set 2023Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user. This could allow an attacker to perform unintended actions resulting in escalation of privileges which has low impact on confidentiality and integrity with no impact on availibility of the system.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
SAP_SE · SAP Manage Purchase Contracts AppQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →