PT-2023-22159 · Sap · Sap Aif

Publicado 2023-04-11 · Atualizado 2023-04-18 · CVE-2023-29111

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP AIF (ODATA service) versions 755, 756

Description The SAP AIF (ODATA service) discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component, causing a low impact on the confidentiality of the application.

Recommendations For versions 755 and 756, consider restricting access to sensitive information to minimize the risk of exploitation until a fix is available. As a temporary workaround, consider disabling the ODATA service until a patch is available. Restrict access to the SAP AIF component to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2023-29111

Produtos afetados

Sap Aif

Referências · 6

• https://osv.dev/vulnerability/CVE-2023-29111 · Aviso do Fabricante
• https://t.me/cibsecurity/61820 · Publicação no Telegram
• https://launchpad.support.sap.com/#/notes/3117978 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-29111 · Nota de Segurança
• https://t.me/cvenotify/47966 · Publicação no Telegram
• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Aviso do Fabricante