PT-2023-31268 · Sap · Sap Solution Manager

Publicado 2023-12-11 · Atualizado 2023-12-14 · CVE-2023-49587

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SAP Solution Manager version 720

Description The issue allows an authorized attacker to execute certain deprecated function modules, which can read or modify data of the same or other components without user interaction over the network.

Recommendations For SAP Solution Manager version 720, consider restricting access to deprecated function modules to minimize the risk of exploitation. As a temporary workaround, disabling the execution of these deprecated function modules can help until a more permanent solution is available.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2023-49587

Produtos afetados

Sap Solution Manager

Referências · 6

• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-49587 · Nota de Segurança
• https://twitter.com/CVEnew/status/1734394493095604559 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-49587 · Aviso do Fabricante
• https://me.sap.com/notes/3395306 · Nota
• https://twitter.com/VulmonFeeds/status/1734462728205402601 · Publicação no Twitter