PT-2021-17545
CVE-2021-27609
·
تاريخ النشر
2021-04-13
·
تاريخ التحديث
2021-04-20
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
SAP Focused RUN versions 200, 300
Description
The issue concerns a lack of necessary authorization checks for authenticated users, allowing them to manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without proper authorization. This can be achieved by calling the oData service.
Recommendations
For SAP Focused RUN versions 200, 300, consider restricting access to the oData service until a fix is available to prevent unauthorized manipulation of the SAP EarlyWatch Alert service.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾