PT-2023-20653 · Sap · Sap Netweaver Application Server Java
CVE-2023-26460
·
Publicado
2023-03-14
·
Atualizado
2023-04-11
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver Application Server for Java version 7.50
Description
The Cache Management Service in SAP NetWeaver Application Server for Java does not perform authentication checks for functionalities that require user identity.
Recommendations
For SAP NetWeaver Application Server for Java version 7.50, consider implementing additional authentication checks for functionalities that require user identity as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sap Netweaver Application Server Java