CVE-2023-2827

Name of the Vulnerable Software and Affected Versions SAP Plant Connectivity version 15.5 Production Connector for SAP Digital Manufacturing version 1.0

Description The issue is related to the lack of validation of the signature of the JSON Web Token (JWT) in HTTP requests sent from SAP Digital Manufacturing. This could allow unauthorized callers from the internal network to send service requests, potentially impacting the integrity of the integration with SAP Digital Manufacturing.

Recommendations For SAP Plant Connectivity version 15.5, update to a version that includes a fix for the issue with JSON Web Token validation. For Production Connector for SAP Digital Manufacturing version 1.0, update to a version that includes a fix for the issue with JSON Web Token validation. As a temporary workaround, consider restricting access to the vulnerable components to minimize the risk of exploitation.